Did you implemented checkAuth(XWikiContext context) in your
authenticator ? Deciding if a user is still authenticated is supposed
to be your authenticator job when it's a SSO, if the user is not
authenticated anymore then this method is supposed to return null.