In your initial question you says you're trying to understand... Two-Fold? If you're reading those definitions thinking they're for two-fold.. that could be your issue.

As to modifying the apps for SSO, an application has its own proprietary login system. These apps need to be modified to accept the credentials of the SSO software.