Learn how PassBeyond adds SAML-based Single Sign-On (SSO) in front of existing self-hosted apps as a stateless reverse proxy - without changing application code, using JWT sessions and HTTP headers for identity.