OK, I got it. You still have to make some adjustments for sso to work externally.
These can be found here: