So a couple days after I complain about Watchguard having a broken SSO agent they release an update! Perhaps they read my blog? In any case before all they had was an agent which gets installed on a server, now they have both an agent and client. The client runs in the background and facilitates the passing of credentials. I will implement this in the next few days and report on how it goes.