In functions.jsconnect.php the function for creating the sso-string for embedded SSO uses the sha1 algorithm therefore ignoring other configurations done vie $secure or in the plugin settings.
Shouldn't the function respect configurations from the local installation?