Excellent breakdown, this clearly illustrates why SSO is only half the story and PAM is essential for securing real privileged access.