# SSO **URL:** https://meta.discourse.org/c/support/sso/24.md?page=17 [Latest](https://meta.discourse.org/latest.md) · [Categories](https://meta.discourse.org/categories.md) · [Tags](https://meta.discourse.org/tags.md) **Page:** 18 --- ## [Rare SSO issue causing 500 error and no log entry](https://meta.discourse.org/t/rare-sso-issue-causing-500-error-and-no-log-entry/54151)
**Author:** [@Jesse\_Houston](https://meta.discourse.org/u/Jesse_Houston)\ **Replies:** 4\ **Last updated:** [December 13, 2016, 4:18am UTC](https://meta.discourse.org/t/rare-sso-issue-causing-500-error-and-no-log-entry/54151 "2016-12-13T04:18:45Z")
Hey there, We have a rare bug (~5% of users) in our Discourse SSO implementation where the user authenticates against our backend, then is sent back to Discourse with the SSO and Sig parameters, but are returned the err… --- ## [How to migrate users from normal to sso](https://meta.discourse.org/t/how-to-migrate-users-from-normal-to-sso/111668)
**Author:** [@Wurzelseppi](https://meta.discourse.org/u/Wurzelseppi)\ **Replies:** 1\ **Last updated:** [April 8, 2019, 11:05am UTC](https://meta.discourse.org/t/how-to-migrate-users-from-normal-to-sso/111668 "2019-04-08T11:05:15Z")
Hi guys, I started my community in normal mode, but will switch to SSO soon. Is there a good “best practice” available how to switch a user from his individual account to sso mode ? I´m using the official https://git… --- ## [SSO user unnecessary approval with 403 error](https://meta.discourse.org/t/sso-user-unnecessary-approval-with-403-error/112931)
**Author:** [@omarfilip](https://meta.discourse.org/u/omarfilip)\ **Replies:** 14\ **Last updated:** [April 2, 2019, 2:41pm UTC](https://meta.discourse.org/t/sso-user-unnecessary-approval-with-403-error/112931 "2019-04-02T14:41:26Z")
Wordpress handles my user creation, but today I have this user’s approval pending: Clicking Approve leads to a 403 error: I’ve never seen a user come up for approval before, so I’m not sure why this one is differ… --- ## [Too many redirects from email link (Gmail app -\> Safari) on iOS on site with SSO](https://meta.discourse.org/t/too-many-redirects-from-email-link-gmail-app-safari-on-ios-on-site-with-sso/112751)
**Author:** [@omarfilip](https://meta.discourse.org/u/omarfilip)\ **Replies:** 4\ **Last updated:** [March 27, 2019, 10:03pm UTC](https://meta.discourse.org/t/too-many-redirects-from-email-link-gmail-app-safari-on-ios-on-site-with-sso/112751 "2019-03-27T22:03:22Z")
Can anyone else reproduce the “Safari cannot open the page because too many redirects occurred” error when tapping the “View Topic” in an email in the Gmail app on iOS? Reading the email message in Apple Mail and openin… --- ## [SSO redirect loop with Lax cookies, but only for my IPhone?!](https://meta.discourse.org/t/sso-redirect-loop-with-lax-cookies-but-only-for-my-iphone/112579)
**Author:** [@consideRatio](https://meta.discourse.org/u/consideRatio)\ **Replies:** 10\ **Last updated:** [March 27, 2019, 8:20pm UTC](https://meta.discourse.org/t/sso-redirect-loop-with-lax-cookies-but-only-for-my-iphone/112579 "2019-03-27T20:20:55Z")
When I try to login on my IPhone (either Chrome or Safari), I end up with a redirect loop, bouncing away from / after being signed in even though it seems like discourse say I successfully sign in. I decided to try disab… --- ## [Native SSO with Azure AD](https://meta.discourse.org/t/native-sso-with-azure-ad/105509)
**Author:** [@andy.czerwonka](https://meta.discourse.org/u/andy.czerwonka)\ **Replies:** 3\ **Last updated:** [March 26, 2019, 7:58am UTC](https://meta.discourse.org/t/native-sso-with-azure-ad/105509 "2019-03-26T07:58:40Z")
Can we use the native SSO capability (no external plugins) as use Azure AD as the authentication provider? The workflow we’re looking for is similar to that of logging into any Office 365 app, i.e. it would simply redire… --- ## [Extending NONCE timeout period](https://meta.discourse.org/t/extending-nonce-timeout-period/63733)
**Author:** [@robmc](https://meta.discourse.org/u/robmc)\ **Replies:** 9\ **Last updated:** [March 19, 2019, 6:39am UTC](https://meta.discourse.org/t/extending-nonce-timeout-period/63733 "2019-03-19T06:39:24Z")
Is there any way, or reason not to, extend the period of the NONCE validity beyond 10 minutes? Our SSO currently involves logging in to our existing site and creating a username and/or new display name. Since these shou… --- ## [SSO - "There is a problem with your account. Please contact the site's administrator."](https://meta.discourse.org/t/sso-there-is-a-problem-with-your-account-please-contact-the-sites-administrator/42126)
**Author:** [@programster](https://meta.discourse.org/u/programster)\ **Replies:** 16\ **Last updated:** [March 18, 2019, 1:56pm UTC](https://meta.discourse.org/t/sso-there-is-a-problem-with-your-account-please-contact-the-sites-administrator/42126 "2019-03-18T13:56:15Z")
I just setup SSO on my discourse forum that I deployed through docker using the latest “stable” version (1.5). To clarify, I have my own SSO service that I am using to log into discourse. I am not using Discourse as an S… --- ## [OAUTH basic plugin and redirect url](https://meta.discourse.org/t/oauth-basic-plugin-and-redirect-url/111568)
**Author:** [@Wurzelseppi](https://meta.discourse.org/u/Wurzelseppi)\ **Replies:** 2\ **Last updated:** [March 14, 2019, 11:06am UTC](https://meta.discourse.org/t/oauth-basic-plugin-and-redirect-url/111568 "2019-03-14T11:06:41Z")
Hey guys, how can I configure how discourse generates the redirect url. My problem is that my oauth provider configured this (and can´t change it due to conventions): https://…/auth/oauth2/realms/root/realms/../authori… --- ## [/admin/users/sync\_sso 403 Forbidden](https://meta.discourse.org/t/admin-users-sync-sso-403-forbidden/111354)
**Author:** [@ulv8888](https://meta.discourse.org/u/ulv8888)\ **Replies:** 1\ **Last updated:** [March 12, 2019, 6:00pm UTC](https://meta.discourse.org/t/admin-users-sync-sso-403-forbidden/111354 "2019-03-12T18:00:35Z")
Hi all I need some assistance with POST to /admin/users/sync\_sso endpoint. The request (Postman) is: POST /admin/users/sync\_sso HTTP/1.1 Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache sso=cmVt… --- ## [Infinite SSO redirect on Safari](https://meta.discourse.org/t/infinite-sso-redirect-on-safari/110857)
**Author:** [@fefrei](https://meta.discourse.org/u/fefrei)\ **Replies:** 5\ **Last updated:** [March 8, 2019, 7:03pm UTC](https://meta.discourse.org/t/infinite-sso-redirect-on-safari/110857 "2019-03-08T19:03:48Z")
With multiple Discourse instances that have login required set and use SSO, we’re experiencing infinite redirects on login with Safari on iOS. Here’s what happens: User is not logged in in Discourse or SSO master site. … --- ## [SSO login & logout issues](https://meta.discourse.org/t/sso-login-logout-issues/48351)
**Author:** [@junaid\_pk14](https://meta.discourse.org/u/junaid_pk14)\ **Replies:** 2\ **Last updated:** [August 12, 2016, 12:43am UTC](https://meta.discourse.org/t/sso-login-logout-issues/48351 "2016-08-12T00:43:03Z")
Hello, We have rails application that is working as SSO provider and our forum is SSO consumer. Using Discourse forum available option we have successfully implemented followig flow Case a) 1- User open forum site(www… --- ## [Implementing SSO for dev environment and troubleshoot](https://meta.discourse.org/t/implementing-sso-for-dev-environment-and-troubleshoot/108150)
**Author:** [@James\_Park](https://meta.discourse.org/u/James_Park)\ **Replies:** 5\ **Last updated:** [February 4, 2019, 12:36am UTC](https://meta.discourse.org/t/implementing-sso-for-dev-environment-and-troubleshoot/108150 "2019-02-04T00:36:56Z")
Hey all, So I am currently tasked with figuring out how to implement SSO for my company and they wanted me to learn how to set it up in the dev environment before we go forward with integrating Discourse. I am using a … --- ## [Triggering automatic authentication via SSO when linking to private topics?](https://meta.discourse.org/t/triggering-automatic-authentication-via-sso-when-linking-to-private-topics/106913)
**Author:** [@ngm](https://meta.discourse.org/u/ngm)\ **Replies:** 4\ **Last updated:** [January 22, 2019, 12:34pm UTC](https://meta.discourse.org/t/triggering-automatic-authentication-via-sso-when-linking-to-private-topics/106913 "2019-01-22T12:34:53Z")
We are using our own application as the SSO provider to Discourse, and we’re having an issue when linking users to private topics in our Discourse forum from our application, in that authentication is only triggered when… --- ## [Admin & Moderator roles defined in external database](https://meta.discourse.org/t/admin-moderator-roles-defined-in-external-database/105896)
**Author:** [@Subham\_Joshi](https://meta.discourse.org/u/Subham_Joshi)\ **Replies:** 3\ **Last updated:** [January 7, 2019, 1:45pm UTC](https://meta.discourse.org/t/admin-moderator-roles-defined-in-external-database/105896 "2019-01-07T13:45:15Z")
Is there a way we can define admin roles & moderator roles outside the discourse.? As like configuration in azure AD and while logging in using Oauth2, we can fetch the roles and show them as Admin, Moderator & User.? I… --- ## [Sign in to Discourse using ORCID](https://meta.discourse.org/t/sign-in-to-discourse-using-orcid/105488)
**Author:** [@josborn](https://meta.discourse.org/u/josborn)\ **Replies:** 2\ **Last updated:** [January 2, 2019, 4:34pm UTC](https://meta.discourse.org/t/sign-in-to-discourse-using-orcid/105488 "2019-01-02T16:34:01Z")
Hi all! We’re evaluating discourse as a replacement to the features of Moodle that we use (discussion forums in particular). One of the questions our evaluation team has is whether or not we can add support for members… --- ## [SSO redirection using Microsoft Oauth2 plugin(without login button)](https://meta.discourse.org/t/sso-redirection-using-microsoft-oauth2-plugin-without-login-button/105004)
**Author:** [@Subham\_Joshi](https://meta.discourse.org/u/Subham_Joshi)\ **Replies:** 6\ **Last updated:** [December 27, 2018, 6:20am UTC](https://meta.discourse.org/t/sso-redirection-using-microsoft-oauth2-plugin-without-login-button/105004 "2018-12-27T06:20:29Z")
I need to login into discourse without clicking “Log In” button, currently I had implemented Microsoft Oauth2 authentication. I checked the settings “enable sso” it used “/session/sso” for login & redirect. Can there b… --- ## [Patreon SSO Login Button is confusing](https://meta.discourse.org/t/patreon-sso-login-button-is-confusing/92257)
**Author:** [@Jay\_Dee](https://meta.discourse.org/u/Jay_Dee)\ **Replies:** 5\ **Last updated:** [December 14, 2018, 4:32am UTC](https://meta.discourse.org/t/patreon-sso-login-button-is-confusing/92257 "2018-12-14T04:32:17Z")
I was looking around and saw I should ping @awesomerobot about this. If I’m wrong, my apologies, and please point me in the right direction. Is there any way to make the Login with Patreon clearer that that’s what it i… --- ## [SAML fingerprint mismatch](https://meta.discourse.org/t/saml-fingerprint-mismatch/89140)
**Author:** [@yrs](https://meta.discourse.org/u/yrs)\ **Replies:** 1\ **Last updated:** [November 24, 2018, 12:32pm UTC](https://meta.discourse.org/t/saml-fingerprint-mismatch/89140 "2018-11-24T12:32:38Z")
Hello Discourse Devs, We are seeing the following error: (saml) Authentication failure! invalid\_ticket: OneLogin::RubySaml::ValidationError, Fingerprint mismatch I’ve verified the fingerprint by generating a SHA256 f… --- ## [Resetting or Destroying Single Sign On Records](https://meta.discourse.org/t/resetting-or-destroying-single-sign-on-records/62619)
**Author:** [@qco](https://meta.discourse.org/u/qco)\ **Replies:** 6\ **Last updated:** [November 20, 2018, 6:50am UTC](https://meta.discourse.org/t/resetting-or-destroying-single-sign-on-records/62619 "2018-11-20T06:50:42Z")
We have recently transitioned our main website from an old Django backed website to a new WordPress based website. We have migrated users, and are trying to switch the SSO provider from our old platform to our new one. I… --- ## [What to do with response from Discourse SSO as provider](https://meta.discourse.org/t/what-to-do-with-response-from-discourse-sso-as-provider/102004)
**Author:** [@Jesper\_Enemark](https://meta.discourse.org/u/Jesper_Enemark)\ **Replies:** 4\ **Last updated:** [November 16, 2018, 8:19am UTC](https://meta.discourse.org/t/what-to-do-with-response-from-discourse-sso-as-provider/102004 "2018-11-16T08:19:43Z")
I have been working to create authentication for my 3rd party application using Discourse as a SSO provider. This means I get a response from discourse, to my web app containing the discourse user. Everything works flaw… --- ## [How to obtain the user\_id so I can issue a logout API call](https://meta.discourse.org/t/how-to-obtain-the-user-id-so-i-can-issue-a-logout-api-call/102033)
**Author:** [@TeoWneD](https://meta.discourse.org/u/TeoWneD)\ **Replies:** 12\ **Last updated:** [November 15, 2018, 4:22pm UTC](https://meta.discourse.org/t/how-to-obtain-the-user-id-so-i-can-issue-a-logout-api-call/102033 "2018-11-15T16:22:58Z")
I searched into many differents posts about SSO logout. But i didn’t found my answer. We want to setup the SSO LOGOUT. You also have to know that we implemented SSO. What is the query, that can return the UID, when i … --- ## [Discourse SSO using auth0 via URL](https://meta.discourse.org/t/discourse-sso-using-auth0-via-url/70039)
**Author:** [@pdias-cci](https://meta.discourse.org/u/pdias-cci)\ **Replies:** 5\ **Last updated:** [November 12, 2018, 6:20pm UTC](https://meta.discourse.org/t/discourse-sso-using-auth0-via-url/70039 "2018-11-12T18:20:36Z")
I am using trying to perform SSO using Auth0 for wordPress and discourse from my own application. the flow is mentioned below. The user enters user name and password in the application, the details are sent to the s… --- ## [Is there a "log\_in" SSO API endpoint?](https://meta.discourse.org/t/is-there-a-log-in-sso-api-endpoint/33545)
**Author:** [@dradtke](https://meta.discourse.org/u/dradtke)\ **Replies:** 1\ **Last updated:** [September 22, 2015, 6:23am UTC](https://meta.discourse.org/t/is-there-a-log-in-sso-api-endpoint/33545 "2015-09-22T06:23:09Z")
According to this post, logging out from an SSO session is as easy as sending a POST request to /admin/users/{USER\_ID}/log\_out, which I managed to get working fairly easily. My question is, is there an equivalent for log… --- ## [Customized login](https://meta.discourse.org/t/customized-login/101331)
**Author:** [@thusar\_Chhade](https://meta.discourse.org/u/thusar_Chhade)\ **Replies:** 7\ **Last updated:** [November 6, 2018, 11:08am UTC](https://meta.discourse.org/t/customized-login/101331 "2018-11-06T11:08:01Z")
We have a site in php(laravel framework) and want to use our own login/sign up method instead of using discourse login/signup- meaning we would like Discourse to use our existing website user database for authentication,… --- ## [SSO Default Avatars](https://meta.discourse.org/t/sso-default-avatars/33153)
**Author:** [@KazWolfe](https://meta.discourse.org/u/KazWolfe)\ **Replies:** 1\ **Last updated:** [September 12, 2015, 2:31am UTC](https://meta.discourse.org/t/sso-default-avatars/33153 "2015-09-12T02:31:27Z")
Recently, I was browsing through the settings when I came across the sso overrides avatar setting. If I enable this, but still allow users to upload their own avatars, will the SSO avatar be the “default” until one is s… --- ## [Integrate discourse authentication with external service which is token base authentication](https://meta.discourse.org/t/integrate-discourse-authentication-with-external-service-which-is-token-base-authentication/83448)
**Author:** [@e346m](https://meta.discourse.org/u/e346m)\ **Replies:** 2\ **Last updated:** [October 24, 2018, 4:27pm UTC](https://meta.discourse.org/t/integrate-discourse-authentication-with-external-service-which-is-token-base-authentication/83448 "2018-10-24T16:27:04Z")
I want to integrate discourse authentication with my service but I have some issue. At first My web service is Single Page Application and authentication is token base. Flow of register is Facebook auth through Firebas… --- ## [SSO avatar not updating when using URLs from my site](https://meta.discourse.org/t/sso-avatar-not-updating-when-using-urls-from-my-site/99603)
**Author:** [@twm](https://meta.discourse.org/u/twm)\ **Replies:** 3\ **Last updated:** [October 16, 2018, 6:30pm UTC](https://meta.discourse.org/t/sso-avatar-not-updating-when-using-urls-from-my-site/99603 "2018-10-16T18:30:27Z")
Hello, I hope someone can help me with this. I’m using the WordPress discourse plugin with WordPress as my SSO provider. I’m trying to set the avatar\_url from a custom user meta field populated with a gravity form. Whe… --- ## [Synchronizing Changes for SSO users](https://meta.discourse.org/t/synchronizing-changes-for-sso-users/29270)
**Author:** [@Ply\_py](https://meta.discourse.org/u/Ply_py)\ **Replies:** 5\ **Last updated:** [June 1, 2015, 1:42pm UTC](https://meta.discourse.org/t/synchronizing-changes-for-sso-users/29270 "2015-06-01T13:42:41Z")
Hi here. We used the SSO feature to connect the Discourse with our own account. As we manage accounts info on our own sites, we enabled email overriding, username overriding and name overriding. However, when a user chan… --- ## [Integration with .NET MVC application for a SaaS platform](https://meta.discourse.org/t/integration-with-net-mvc-application-for-a-saas-platform/98107)
**Author:** [@gercek](https://meta.discourse.org/u/gercek)\ **Replies:** 4\ **Last updated:** [October 9, 2018, 1:44pm UTC](https://meta.discourse.org/t/integration-with-net-mvc-application-for-a-saas-platform/98107 "2018-10-09T13:44:09Z")
Hi, I’m the founder of Raklet and I’ve been using Discourse at Techstars Connect for more than 2 years. It’s a great product! My goal is to integrate Discourse with our SaaS platform. Raklet provides Contacts CRM Mes… [Previous page](https://meta.discourse.org/c/support/sso/24.md?page=16) [Next page](https://meta.discourse.org/c/support/sso/24.md?page=18)