Ping Identity conducted anonymous interviews of seventeen Chief Information Security Officers (CISOs) and Information Security Officers across financial services, healthcare, education, insurance and business services. What we learned was surprising: many of the survey participants share three common misperceptions about secure Internet single sign-on (SSO). This paper identifies those misperceptions and provides clarifications to help readers understand the realities of delivering secure Internet SSO by deploying federated identity management.