The Hub SSO Library supports single sign-on across multiple Rails applications on the same host. The Hub application provides account management facilities (sign up, log in, etc.). The library provides read-only access to data set up by the application. Using the library, external applications can see whether or not someone is logged in via Hub and see what their assigned roles are. Each application determines its own mappings between roles and permissions.