What are some reasons a company should not go with single sign on? [migrated]

A company I am working for is advocating for single sign on for their Ecommerce site and an Online clinical testing platform that contain sensitive patient information.

My concern is the sensitive information on the patient testing site. Users of the ecommerce site does not always use the testing platform and vice versa, but there are some users who use both.