Hi,
I am using an SSO to get users to log in to a discourse instance from another web page. I am getting complaints from users saying that they are being logged in as someone else with the privileges of that other person !
I couldn’t put my hand on why before I read this. the typical complaint is usually from a Jane doe saying that when she logs in she is logged in as “Jane smith” instead… I’m not sure if the problem is from my SSO code or could it be that someone (there are other admins) impersonated Jane Doe which logged her out and then when she attemps a login she goes in as Jane Smith.
Is there a solution to this if that is the case?