Site B
Start SSO (redirect)
session.verify
getJWT
Logout