The SSO module cannot self-install. This is the reason why we had tutorials in the incubator to show users how to properly set it up without breaking the system:

• SSO Admincentral Login
• SSO Website Login

If the module bootstraps/setup configuration then you don't have chance to login and setup properly. This is exactly how the incubator version worked but the new PD version is trying to bootstrap/setup. This cannot work.

Reproduce

1. Install the SSO module into a fresh system.
2. Perform the installation.
3. Proceed to the license screen. Observe it's broken (missing CSS).
4. Enter the license and see the error.
   

Actual
The SSO login filter is configured in the chain before it's actually ready to handle login. This cannot work.

Expected
It's the users responsibility to setup login. They can create a module which bootstrap their specific configuration.

Notes
The most important is a YAML decorator that is needed at project-level in order to specify target URLs, clientId, etc. This file must be located in an observed directory with the following path:

<MODULE_NAME>/decorations/magnolia-sso/config.yaml