If i were you, i would offer it to them as an in house hosted service. That clears the SSO and shared database requirements. Remember to specify remote access for you as the developer.
It will also enable you to cherry pick the requirements useful to your product without affecting your core.
It will also enable you to cherry pick the requirements useful to your product without affecting your core.