IdentityServer3 + WebApi + AngularJs + SSO + BearerToken stored in HTTPS cookie
Example of SSO Token based with Token stored in a Cookie for better security than Session storage.
SSO between subdomains.
Web Api based
Owin Middleware read cookie and add Authentication in the header
Token is never on Client