# SSO

**URL:** https://meta.discourse.org/c/support/sso/24.md?page=19

[最新版本](https://meta.discourse.org/latest.md) · [分類](https://meta.discourse.org/categories.md) · [標簽](https://meta.discourse.org/tags.md)

**Page:** 20

---

## [启用 SSO 后出现登录和注销问题](https://meta.discourse.org/t/login-and-logout-problem-after-enabling-sso/88158)

<div class="topic-metadata">

**Author:** [@Brajmohan\_Kumar](https://meta.discourse.org/u/Brajmohan_Kumar)\
**回覆:** 1\
**Last updated:** [2018年五月22日 18:25 UTC](https://meta.discourse.org/t/login-and-logout-problem-after-enabling-sso/88158 "2018-05-22T18:25:03Z")

</div>

我最近启用了 SSO，之后当我从 Discourse 论坛登出并尝试再次登录时，我的账户会自动登录，无需输入凭据。 我知道这是由于 SSO 导致的……

---

## [退出 Google 和 Facebook SSO](https://meta.discourse.org/t/logout-of-google-and-facebook-sso/87745)

<div class="topic-metadata">

**Author:** [@PaulSTC](https://meta.discourse.org/u/PaulSTC)\
**回覆:** 1\
**Last updated:** [2018年五月17日 22:07 UTC](https://meta.discourse.org/t/logout-of-google-and-facebook-sso/87745 "2018-05-17T22:07:02Z")

</div>

我使用 Discourse 论坛供同事讨论工作相关话题。当他们从工作电脑登录时，系统也会自动将他们登录到 Gmail 或 Facebook，而有些人对此并不知情。随后当他们退出 Discourse……

---

## [OAuth2 插件 SSO 如何关闭邮箱验证](https://meta.discourse.org/t/oauth2-plugin-sso-how-to-switch-off-email-verification/87542)

<div class="topic-metadata">

**Author:** [@shahidmir](https://meta.discourse.org/u/shahidmir)\
**回覆:** 20\
**Last updated:** [2018年五月16日 10:50 UTC](https://meta.discourse.org/t/oauth2-plugin-sso-how-to-switch-off-email-verification/87542 "2018-05-16T10:50:33Z")

</div>

大家好， 过去大约 4 周或更长时间里，我一直在断断续续地致力于 Auth0 与 Discourse 之间的单点登录（SSO）集成。我尝试过多种解决方案，并不得不多次调整我的方法。现在，我到了一个需要进一……

---

## [SSO 在新用户创建后未返回 return\_url](https://meta.discourse.org/t/sso-dont-return-to-return-url-after-new-user-creation/79492)

<div class="topic-metadata">

**Author:** [@xagaba](https://meta.discourse.org/u/xagaba)\
**回覆:** 2\
**Last updated:** [2018年五月13日 15:14 UTC](https://meta.discourse.org/t/sso-dont-return-to-return-url-after-new-user-creation/79492 "2018-05-13T15:14:58Z")

</div>

我有一个网站，使用 Discourse 作为单点登录（SSO）提供商。 我在网站上有一个登录按钮，该按钮会重定向到 Discourse SSO，并设置了 return\_url。 如果现有用户成功登录，Discourse 会遵守我的 return\_url…

---

## [SSO\_SYNC 无法正常工作](https://meta.discourse.org/t/sso-sync-not-working/87150)

<div class="topic-metadata">

**Author:** [@shahidmir](https://meta.discourse.org/u/shahidmir)\
**回覆:** 6\
**Last updated:** [2018年五月10日 16:13 UTC](https://meta.discourse.org/t/sso-sync-not-working/87150 "2018-05-10T16:13:46Z")

</div>

大家好， 我需要协助处理 /admin/users/sso\_sync 端点的问题。 我正在使用 Postman 尝试通过该端点更新电子邮件地址，但 Postman 返回的是一个 HTML 页面（基本上就是……

---

## [Bratwurst: the wurst possible production DiscourseConnect provider](https://meta.discourse.org/t/bratwurst-the-wurst-possible-production-discourseconnect-provider/72343)

<div class="topic-metadata">

**Author:** [@supermathie](https://meta.discourse.org/u/supermathie)\
**回覆:** 1\
**Last updated:** [2018年四月24日 22:25 UTC](https://meta.discourse.org/t/bratwurst-the-wurst-possible-production-discourseconnect-provider/72343 "2018-04-24T22:25:05Z")

</div>

I felt like making something the other night, so I implemented an DiscourseConnect provider that is useful for development and testing: https://github.com/Supermathie/bratwurst The utility of this is to be able to conf…

---

## [Cannot load avatar images from particular sites](https://meta.discourse.org/t/cannot-load-avatar-images-from-particular-sites/71003)

<div class="topic-metadata">

**Author:** [@Konstantin](https://meta.discourse.org/u/Konstantin)\
**回覆:** 8\
**Last updated:** [2017年十一月30日 21:23 UTC](https://meta.discourse.org/t/cannot-load-avatar-images-from-particular-sites/71003 "2017-11-30T21:23:27Z")

</div>

Hello. Sory for bad english, it’s not native for me ) I’ve installed discourse for my project - it’s incredible!!! All works fine, except load avatars by SSO from IIS server - yes it is sound strange, but fact! For e…

---

## [SSO 覆盖管理员用户](https://meta.discourse.org/t/sso-overwrites-admin-user/84691)

<div class="topic-metadata">

**Author:** [@Nopsled](https://meta.discourse.org/u/Nopsled)\
**回覆:** 2\
**Last updated:** [2018年四月6日 05:20 UTC](https://meta.discourse.org/t/sso-overwrites-admin-user/84691 "2018-04-06T05:20:28Z")

</div>

大家好， SSO 已设置并正常运行。使用我在网站上的第一个用户账户（管理员账户）时效果很好，可以按预期登录该用户。但是，当我尝试通过 SSO 登录另一个用户（不同用户）时……

---

## [Readable full access site, SSO login to POST](https://meta.discourse.org/t/readable-full-access-site-sso-login-to-post/61583)

<div class="topic-metadata">

**Author:** [@growthcommunity](https://meta.discourse.org/u/growthcommunity)\
**回覆:** 5\
**Last updated:** [2018年四月5日 11:21 UTC](https://meta.discourse.org/t/readable-full-access-site-sso-login-to-post/61583 "2018-04-05T11:21:08Z")

</div>

We’d like to permit visitors to be able to read content without having to go through SSO to read. Currently at https://community.outdoorsy.co/ we reroute visitors to our login page. It’s too much friction to sign in with…

---

## [如何通过配置（不使用管理面板）配置 SSO 授权 URL](https://meta.discourse.org/t/how-to-configure-the-sso-authorization-url-via-config-without-using-the-admin-panel/84572)

<div class="topic-metadata">

**Author:** [@shahidmir](https://meta.discourse.org/u/shahidmir)\
**回覆:** 5\
**Last updated:** [2018年四月5日 09:30 UTC](https://meta.discourse.org/t/how-to-configure-the-sso-authorization-url-via-config-without-using-the-admin-panel/84572 "2018-04-05T09:30:41Z")

</div>

你好， 我需要在三个环境中部署 Discourse，每个环境指向不同的 SSO 授权 URL。 是否有方法在不登录并通过管理面板操作的情况下设置 SSO 授权 URL？ 此致

---

## [更改用于标识用户的唯一键](https://meta.discourse.org/t/changing-the-unique-key-to-identify-users/84457)

<div class="topic-metadata">

**Author:** [@shahidmir](https://meta.discourse.org/u/shahidmir)\
**回覆:** 3\
**Last updated:** [2018年四月3日 12:13 UTC](https://meta.discourse.org/t/changing-the-unique-key-to-identify-users/84457 "2018-04-03T12:13:01Z")

</div>

你好， 我计划将用户迁移到 Discourse。 请问 Discourse 在数据库中哪个字段用于唯一标识用户账户？ 我需要在多个应用中使用一个通用 ID 来关联所有数据，因此可能需要……

---

## [Auth0 SSO 端点将被删除](https://meta.discourse.org/t/auth0-sso-endpoint-will-be-deleted/82601)

<div class="topic-metadata">

**Author:** [@Krzysztof\_Daniel](https://meta.discourse.org/u/Krzysztof_Daniel)\
**回覆:** 6\
**Last updated:** [2018年三月22日 16:37 UTC](https://meta.discourse.org/t/auth0-sso-endpoint-will-be-deleted/82601 "2018-03-22T16:37:52Z")

</div>

根据 Auth0 的公告，Auth0 Migrations 中的 SSO 端点将被弃用。这是否意味着 Discourse 将不再与 Auth0 兼容？

---

## [无效的 nonce 错误](https://meta.discourse.org/t/invalid-nonce-error/83264)

<div class="topic-metadata">

**Author:** [@shahidmir](https://meta.discourse.org/u/shahidmir)\
**回覆:** 8\
**Last updated:** [2018年三月19日 10:44 UTC](https://meta.discourse.org/t/invalid-nonce-error/83264 "2018-03-19T10:44:36Z")

</div>

所以我正在尝试以下操作： 客户端通过 Auth0 认证登录我的应用。 认证成功后，一条 Auth0 规则被触发，并回调我应用中的一个页面，该页面包含一个隐藏的 iframe。这个隐藏的 iframe…

---

## [Docker deployment with custom site\_settings.yml](https://meta.discourse.org/t/docker-deployment-with-custom-site-settings-yml/31914)

<div class="topic-metadata">

**Author:** [@zingbats](https://meta.discourse.org/u/zingbats)\
**回覆:** 9\
**Last updated:** [2018年三月19日 00:06 UTC](https://meta.discourse.org/t/docker-deployment-with-custom-site-settings-yml/31914 "2018-03-19T00:06:59Z")

</div>

Hello, I’m trying to follow the SSO instructions, which requires a site\_settings.yml customization. I’m currently deploying to production using docker using GitHub - discourse/discourse\_docker: A Docker image for Discou…

---

## [Log in a user via the API](https://meta.discourse.org/t/log-in-a-user-via-the-api/42862)

<div class="topic-metadata">

**Author:** [@wasimkham](https://meta.discourse.org/u/wasimkham)\
**回覆:** 10\
**Last updated:** [2018年三月19日 00:55 UTC](https://meta.discourse.org/t/log-in-a-user-via-the-api/42862 "2018-03-19T00:55:45Z")

</div>

I’ve got SSO set up and working with my website. I’m now wondering if it’s possible to log in a user to Discourse automatically, via the API, when someone logs into the website? This is good so that users do not have to…

---

## [使用单一 SSO 提供商连接多个 Discourse 站点](https://meta.discourse.org/t/using-multiple-discourse-sites-with-a-single-sso-provider/82311)

<div class="topic-metadata">

**Author:** [@Philip\_Colmer](https://meta.discourse.org/u/Philip_Colmer)\
**回覆:** 4\
**Last updated:** [2018年三月7日 08:30 UTC](https://meta.discourse.org/t/using-multiple-discourse-sites-with-a-single-sso-provider/82311 "2018-03-07T08:30:12Z")

</div>

我们使用内部 SSO 提供商，该提供商通过 LDAP 进行身份验证。我们已扩展了核心功能，以便在用户身份验证时，该提供商会从 Discourse 获取组列表，然后填充…

---

## [一个用于轻松模拟 SSO 的 Django 应用](https://meta.discourse.org/t/a-django-app-for-easy-sso-simulation/81810)

<div class="topic-metadata">

**Author:** [@Sudaraka](https://meta.discourse.org/u/Sudaraka)\
**回覆:** 0\
**Last updated:** [2018年二月28日 18:55 UTC](https://meta.discourse.org/t/a-django-app-for-easy-sso-simulation/81810 "2018-02-28T18:55:35Z")

</div>

大家好， 我创建了一个简单的 Django 应用，使用此处提到的脚本来模拟 Discourse 的单点登录（SSO）。 https://meta.discourse.org/t/sso-example-for-django/14258 SSO 有效载荷的参数需要硬编码。B…

---

## [外部 SSO 外部 ID 未识别](https://meta.discourse.org/t/external-sso-external-id-not-recognised/80989)

<div class="topic-metadata">

**Author:** [@aseemc](https://meta.discourse.org/u/aseemc)\
**回覆:** 6\
**Last updated:** [2018年二月20日 02:42 UTC](https://meta.discourse.org/t/external-sso-external-id-not-recognised/80989 "2018-02-20T02:42:17Z")

</div>

如果向 Discourse 站点传递了两个带有正确 nonce 的用户，他们总是会被登录到同一个账户。 详细 SSO 日志：用户已登录 forum-u3 nonce: 60a17e6704b8b7a8e1603822ab99f2d6 name: Darryn Go…

---

## [在使用单点登录(SSO)时以编程方式添加用户](https://meta.discourse.org/t/programmatically-adding-users-when-sso-is-being-used/79925)

<div class="topic-metadata">

**Author:** [@Philip\_Colmer](https://meta.discourse.org/u/Philip_Colmer)\
**回覆:** 4\
**Last updated:** [2018年二月6日 17:04 UTC](https://meta.discourse.org/t/programmatically-adding-users-when-sso-is-being-used/79925 "2018-02-06T17:04:53Z")

</div>

We’ve got our internal copy of Discourse configured so that SSO has to be used, and it is connected to our LDAP server. That means that any member of staff can easily log on using their common username and password … but…

---

## [Discourse as SSO provider for Prosody](https://meta.discourse.org/t/discourse-as-sso-provider-for-prosody/52246)

<div class="topic-metadata">

**Author:** [@bangarang](https://meta.discourse.org/u/bangarang)\
**回覆:** 1\
**Last updated:** [2018年一月12日 08:48 UTC](https://meta.discourse.org/t/discourse-as-sso-provider-for-prosody/52246 "2018-01-12T08:48:49Z")

</div>

I want to use Prosody as my xmpp-server in conjunction with Discourse. Users should be able to login to Prosody with their Discourse login within their desired xmpp-client, which will primarily be Conversations. For web-…

---

## [Setting groups on SSO](https://meta.discourse.org/t/setting-groups-on-sso/77393)

<div class="topic-metadata">

**Author:** [@edahlseng](https://meta.discourse.org/u/edahlseng)\
**回覆:** 1\
**Last updated:** [2018年一月7日 01:27 UTC](https://meta.discourse.org/t/setting-groups-on-sso/77393 "2018-01-07T01:27:25Z")

</div>

Looking at the documentation for SSO, it appears that the only way to modify user groups is to specify a set of groups to add or a set of groups to remove… is there any way to simply specify a set of groups that the user…

---

## [Discourse app with SSO login](https://meta.discourse.org/t/discourse-app-with-sso-login/77036)

<div class="topic-metadata">

**Author:** [@Cozdabuch](https://meta.discourse.org/u/Cozdabuch)\
**回覆:** 3\
**Last updated:** [2018年一月3日 09:48 UTC](https://meta.discourse.org/t/discourse-app-with-sso-login/77036 "2018-01-03T09:48:11Z")

</div>

I’m looking at setting up a discourse board on a site where it would be embedded into the existing site. One tab in sites navbar would be discourse page. The site is entirely behind a login screen. Nothing is visible pub…

---

## [Hosting discourse at multiple domain](https://meta.discourse.org/t/hosting-discourse-at-multiple-domain/45690)

<div class="topic-metadata">

**Author:** [@Steve\_Ng](https://meta.discourse.org/u/Steve_Ng)\
**回覆:** 1\
**Last updated:** [2016年六月20日 15:02 UTC](https://meta.discourse.org/t/hosting-discourse-at-multiple-domain/45690 "2016-06-20T15:02:29Z")

</div>

Hi, I’ve discourse hosted at http://a.com I am hosting the same discourse instance at http://b.com would there be some config to make SSO works? Such that when a user clicks login from b.com, it will be redirected bac…

---

## [SSO avatar sync not working due to incorrect HTTP HEAD response](https://meta.discourse.org/t/sso-avatar-sync-not-working-due-to-incorrect-http-head-response/74979)

<div class="topic-metadata">

**Author:** [@Dany](https://meta.discourse.org/u/Dany)\
**回覆:** 13\
**Last updated:** [2017年十二月1日 12:47 UTC](https://meta.discourse.org/t/sso-avatar-sync-not-working-due-to-incorrect-http-head-response/74979 "2017-12-01T12:47:57Z")

</div>

My main website is connected to my discourse application with SSO activated. Evrything work fine but the avatar syncing between website discourse. I read all the thread about this and didn’t find any solution. I have …

---

## [How to hide custom login and register button](https://meta.discourse.org/t/how-to-hide-custom-login-and-register-button/74575)

<div class="topic-metadata">

**Author:** [@Aniket\_Singh](https://meta.discourse.org/u/Aniket_Singh)\
**回覆:** 0\
**Last updated:** [2017年十一月22日 09:52 UTC](https://meta.discourse.org/t/how-to-hide-custom-login-and-register-button/74575 "2017-11-22T09:52:47Z")

</div>

I’m using sso on my discourse and i have added custom header menu, in which i have shown 2 links 1 - Register 2 - Login if the user is logged in. then register and login menu should hide and logout button should be sh…

---

## [Verify if user is already logged (SSO with Saml2 + Discourse-Saml)](https://meta.discourse.org/t/verify-if-user-is-already-logged-sso-with-saml2-discourse-saml/73213)

<div class="topic-metadata">

**Author:** [@murillocr](https://meta.discourse.org/u/murillocr)\
**回覆:** 0\
**Last updated:** [2017年十一月1日 13:47 UTC](https://meta.discourse.org/t/verify-if-user-is-already-logged-sso-with-saml2-discourse-saml/73213 "2017-11-01T13:47:12Z")

</div>

Hello everyone, We successfully implemented the SAML2 authentication using Discourse-SAML plugin. It works great when you click in the “with SAML” button in the login page. Now, we want that if the user is already logge…

---

## [Prevent deleting of abandoned, unactivated accounts?](https://meta.discourse.org/t/prevent-deleting-of-abandoned-unactivated-accounts/72237)

<div class="topic-metadata">

**Author:** [@kgoetz](https://meta.discourse.org/u/kgoetz)\
**回覆:** 4\
**Last updated:** [2017年十月21日 08:32 UTC](https://meta.discourse.org/t/prevent-deleting-of-abandoned-unactivated-accounts/72237 "2017-10-21T08:32:55Z")

</div>

Hi, I’m looking to disable a number of SSO users. The topic below confirms only those with no posts will be deleted (good), but I’m hoping to prevent all users created/synced via sso from being deleted in discourse no …

---

## [Unable to change profile pic due to SSO override](https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170)

<div class="topic-metadata">

**Author:** [@sianwhite](https://meta.discourse.org/u/sianwhite)\
**回覆:** 9\
**Last updated:** [2017年十月16日 12:05 UTC](https://meta.discourse.org/t/unable-to-change-profile-pic-due-to-sso-override/72170 "2017-10-16T12:05:04Z")

</div>

A user has been in touch to say when they joined our community a profile picture was automatically added to their profile (which I’ve never heard of happening before) They asked me to remove it, but I can’t find the opt…

---

## [What is the path to error logs?](https://meta.discourse.org/t/what-is-the-path-to-error-logs/70693)

<div class="topic-metadata">

**Author:** [@malik415](https://meta.discourse.org/u/malik415)\
**回覆:** 3\
**Last updated:** [2017年九月25日 02:10 UTC](https://meta.discourse.org/t/what-is-the-path-to-error-logs/70693 "2017-09-25T02:10:54Z")

</div>

Can someone confirm the exact path where the logs are written to when using SSO or how I can view them? In the admin area, it says logs are in “/logs”, but can someone tell me where that is? I’m using a docker based 1-…

---

## [Webhook and SSO user mapping](https://meta.discourse.org/t/webhook-and-sso-user-mapping/68615)

<div class="topic-metadata">

**Author:** [@Vaishak\_Kallore](https://meta.discourse.org/u/Vaishak_Kallore)\
**回覆:** 1\
**Last updated:** [2017年八月24日 08:22 UTC](https://meta.discourse.org/t/webhook-and-sso-user-mapping/68615 "2017-08-24T08:22:20Z")

</div>

Hi there, I have successfully setup my first Discourse forum having force SSO login. I would like to have this forum integrated in mobile app as well, for better impressions and was looking for Cloud Messaging options …

[上一頁](https://meta.discourse.org/c/support/sso/24.md?page=18)

[下一頁](https://meta.discourse.org/c/support/sso/24.md?page=20)
