my $sso = $query->param("sso");
$sso = shift;
[download]

These two lines in sequence don't make sense.

Either you read $sso from a CGI parameter, or you read it from the command line.

If you read it from a CGI parameter, you will be setting it to undef right afterwards with the above code. That doesn't make sense.