How to implement SSO authenticating on different web app

Hi all.

Sorry for this question, but I am a newbie.

I would like to integrate Grafana inside an application of mine.
On the same second or third level domain, i would like to let the user to authenticate on my application and switch to grafana without login again.
Obviously, in grafana i need to have mapping of the role of the logged user to show the correct reports. The best would be to integrate charts directly in my application.
Is it possibile ? Have you got any suggestion to investigate ?

Thanks a lot for support