thinking out loud a little here, but if you want maintain privacy I'd recommend just looking and reporting on specific cookies. Instead of trying to determine the state of the browser, just make the extension table specific to the SSO related variables, if that's possible