SSO integration no longer honoring admin permissions

sso
1

Hello,

I exclusively use the SSO integration on my Discourse platform. I noticed today that, when I sign in to my Admin account using SSO, I no longer see the Admin related menus, and the /admin endpoint does not work.

However, on another device I have, which has remained logged in for about a week, I do see the Admin menu. This only seems to happen on fresh sign ins, which make me think that:

  1. admin permissions are stored in the session itself (which would make sense)
  2. the SSO integration is no longer properly adding in the admin permission when creating sessions

This means that, once my other device inevitably gets logged out, Iā€™ll be stuck from accessing my admin menus.

Iā€™ve confirmed with another admin on my forum, and the same happens to him if he signs in on an incognito tab.

I also used the ā€œImpersonateā€ button on a test account earlier today, which is when I noticed this issue. Iā€™m not sure if that would be related or not, but worth mentioning?

This now happens on all devices (Mac, PC, iPhone), as well as both admin accounts on my site, regardless of whether we clear cookies or not. We are both still listed on our /about endpoint as Admins, so we were not accidentally removed.

Hopefully this is easy to reproduce & resolve. If I can provide any more information, Iā€™d be happy to do so.

2

Hey @JesseB :wave: Welcome to Meta!

Do you have Cloudflare?
There is another recent topic where this prevented the admin from accessing the admin area.

4 Likes
3

Major props for putting 2:2 together. I wouldnā€™t have assumed it was Cloudflare, especially given the fact that I just updated Discourse today ā€” but thatā€™s exactly it.

Thank you, issue resolved.

1 Like