How to deal with Authentication

Hi Team!

We have one specific scenario related to Authentication that we would like to share with you to get your suggestions and recommendations so we ensure the implementation of the right solution. Let me give you a bit more context.

In our solution, we have our backoffice where the users access using SSO with a google account, this login information is used by our backed service to generate access_token and refresh_token that later we use for our API calls. If we include retool.com as part of our stack as an extension of our backoffice, the user will need to execute a second login workflow (at least in the team plan) to access retool. Additionally, to be able to call from retool to our API, we will need an extra authentication from retool.com to have the access_token and refresh_token available in retool.com too.

Considering this context, what would be the best authentication solution that allows us to be as seamless as possible for our users? could we reuse the SSO we complete to provide the info to retool that is required for the additional API calls?