If you create a stored procedure/function, it takes the privileges of the logged in user. If you want to change this, the user needs SUPER privileges and we don't want that...
But as the SSO is another username every time it's used, you'll soon end up with a mess where SSO users can't change...