The discussion revolves around configuring Auth0 and the OAuth2 Basic Plugin for seamless single sign-on (SSO) between a web app and a Discourse forum. Thorin explains that users must manually click ‘log in’ on the forum despite being authenticated on the main site, and seeks to eliminate this step. Falco suggests enabling login_required and auth immediately settings, noting that auth immediately is crucial when using OAuth2 instead of DiscourseConnect. Thorin confirms these settings are enabled, and Falco suspects a bug if the issue persists. Thorin confirms local login is disabled and only OAuth2 is active. Falco requests the site URL, and Thorin shares it via direct message. Falco demonstrates the expected behavior, redirecting from the forum to Auth0 for login. Thorin seeks clarification on the solution, indicating the issue remains unresolved.
I have managed to successfully connect Auth0 to my discourse forum.
However, it is not working as planned.
Currently:
1 - User logs into our webapp at example.com with auth0
2 - User navigates to forum.example.com
3 - User has to click “log in” again
4 - User is automatically logged in without having to fill in the details again
I am looking for a way to skip step 3.
In other words, when the user logs into our webapp on example.com and then navigates to forum.example.com, I want them to automatically see the content and not have to click “log in” again.
The only way to have that working is by changing login_required to true in the site settings, but that will make your forum lose anonymous access, google bot crawling, etc.