Does Google have good SSO internally? Or Facebook?

(excluding things like administration of organization-wide infrastructure key material)