Hi Friend,
In addition to "Bayu's" suugestion.
3. You can go for MultiVC environment where multiple VCs are connected to same SSO. & In order to provide HA to SSO, you could configure SSO with load balancer (where if 1 SSO goes down second fail over)