The key is to make sure that the web applications you choose support open standards for federated authentication, specifically OpenID Connect or SAML. As long as they do, you'll get SSO across these applications. At least you won't have to re-authenticate (the end user may have to hit a "login" button).
I'm closing this issue because it's not a question about functionality--it's a question about architecture.