It should be possible to configure SSO so that people don’t need to log in again. It’s easiest to put discourse on a sub domain and not in a sufficient.
How to do that is beyond what I can explain here. If you have a budget you can contact me directly through my address in my profile, or post in Marketplace.