Each portal keeps its own separate sign-in — this prototype has no way to carry a session between separate files, so you'll confirm the same login once more after choosing. That becomes true single sign-on once this is on a real server.