The Messenger Express session is only valid for as long as the Access Manager session is valid. If the user logs out of Access Manager the webmail session is automatically closed (single sign-off).
SSO Applications working together must be in the same DNS domain. (Also known as cookie domain).
SSO Applications must have access to Access Manager verification URL (naming service).
Browsers must have cookies.