Are my users' credentials taken abroad at any time during SSO?

[Jagster (Jakke Flemming)]

Abroad… from or to US?

But in generally when using SSO, Discourse, where ever its data is located, will get sensitive data as name and email from SSO, not vice versa.