Sync users from Active Directory (with LDAPS), but how about SSO?

Now that SSO is on the roadmap, how is it planned to work?