Point users to API documentation is not an idiomatic approach to solving SSO. It's best practice for a SaaS to provide XAML authentication to an enterprise's identity system. I should be surprised that Intuit doesn't value the security of its users over forcing their own products/identity systems on them.
