Explaining shrine.conf and override.conf is beyond the scope of the present document. However here are the changes you must make to them for SSO.
add the following element under the top-level "shrine" element in shrine.conf
queryEntryPoint {
authenticationType = "sso"
}
add the following line to override.conf:
shrine.queryEntryPoint.authenticationType = "sso"