On trying to login, it always returns: “Login Error Account login timed out, please try logging in again.” on https://domain/session/sso_login?sso=bm9...&sig=e4f7 … and the Verbose SSO log has “Nonce has already expired”, I don’t see any other error messages. It doesn’t work on both prod and dev…

Thanks for the details via PM @rysher . In case it helps anyone else, the problem here was that the DiscourseConnect flow is being initiated by a server-side request from the identity provider. This isn’t how the protocol is designed to be used, although before the recent security commit, it was tech…

Can it be the result of the recent: Attach DiscourseConnect (SSO) nonce to current session SECURITY: Attach DiscourseConnect (SSO) nonce to current session (#12124) committed 10:57AM - 18 Feb 21 UTC (UTC) …

Are you able to share a link to your site? Do you have any unusual setup with an app, or are users simply using a browser?

SSO stopped working after upgrade to 2.6.2 (from 2.5.1)

Product Support

rysher (Rysher) February 23, 2021, 7:06pm 2

Can it be the result of the recent:
Attach DiscourseConnect (SSO) nonce to current session

Topic		Replies	Views
SSO incorrect nonce SSO	4	1561	April 26, 2023
Session Timeout SSO after rebuild from Backup Product Support	1	784	September 26, 2021
SSO Plugin Account login timed out, please try logging in again Product Support	10	3875	June 11, 2020
Sporadic DiscourseSSO login issues with expired nonce SSO	8	1525	May 31, 2022
SSO broken after rebuild with stable v3.3.3 SSO	7	502	December 22, 2024

SSO stopped working after upgrade to 2.6.2 (from 2.5.1)

Related topics