Can someone explain to me how SSO works?

Is it as simple as allowing someone to log in with their work email? Does that require us to integrate with their email provider? (Like Gmail?)