The SSO token is persisted in the browser by default after the first login and not through streamlit, so the only thing your users need to do is click on the login button and they will be logged in without additional interactions after a previous succesful login (ofc before the token expiration).
I did something like this in my website, you can try it by yourself.