通过另一台服务器绕过SSO系统时的良好做法和陷阱？

I'm in charge of maintaining a web application (Lives on a Tomcat server) which has two different access points, through two Apache HTTPD servers which are outside of my reach.I'm in charge of maintaining a web application