When we choose SSO, the preferred way of setting authentication is Header. Assuming you have some IDP and its doing the authentication, while qlik is behind some proxy.
I don't think ticket auth is the way to go if you already have some SSO.
What SSO are you using ?