Queries regarding ejabberd with SSO and LDAP

Hello guys! I’d like to ask you several questions regarding ejabberd and hopefully you can help me. My first question is, does ejabberd works with Single Sign-On (SSO)? Second, is it possible for me to transfer the log-in credentials from a user session to the client via automatic log-in (like in Spark using SSO)? Third, should I encrypt my LDAP-communication (currently only TLS is feasible)? Fourth, where are the user passwords stored (upon activating the checkbox “save password” in a client)? Lastly, what kind of client would function on a terminal-server? The client must have an encryption support, history, whiteboard and at least SSO. Thanks in advance to those folks who can provide me with answers.