The document Configure secure administrator sessions (websudo) describes the configuration of Websudo with the basic authentication.

In the case of SSO, the users' passwords are not stored on the Bitbucket side, which makes using Websudo impossible without setting the password locally.
The document should describe the best practices during SSO as the main login method.