hi. suppose the case you have two or more ssohandlers. let's call them ssohandler1 and ssohandler2.
extension ordering makes ssohandler1 runs before ssohandler2
in this situation, it my happens ssohandler1 returns true, but loop will continue and will execute the related ssohandler2 function. and if this second one returns false, user won't be logged.
the problem is the $ssoUser !== false check is after the loop.
1 just add two ssohandlers to your ez install.
2 make first return an ezpublish user
3 make second return false.
as result, user won't be logged but it should...