Allow access to community only to users logged into our app

Product Support

AI-generated summary

The goal is to restrict access to the community community.bob.ai to users already logged into the Bob.ai app, without displaying the Auth0 sign-in popup. Bejoy_Narayana seeks a way to redirect users who aren’t logged in to Bob.ai, with a message prompting them to log in to access the community. pfaffman suggests that the current setup might be misconfigured, and Bejoy_Narayana clarifies that the intention is to integrate the community seamlessly into the Bob.ai app. To achieve this, Bejoy_Narayana asks if there’s a configuration option in Discourse to redirect unauthenticated users to Bob.ai instead of Auth0. pfaffman questions whether Bob.ai uses Auth0, noting that Discourse typically sends users to the external authentication service for login.

1

Hello- We want to allow access to community.bob.ai only to users who are already logged into our app. We are now getting a popup from Auth0 to sign in. We don’t want that and we want the user to sign in from Bob.ai. Does anyone know how to do this?

Thanks,

Bejoy

2

You should get whoever configured your system to use Auth0 to instead use bob.ai? You can tell who that was by looking at the admin logs.

But another question might be what do you expect to happen if someone tries to log into Discourse who is not already logged in to your app?

I can’t tell if you have misconfigured your SSO or don’t know how it’s supposed to work.

3

Thanks, Jay. We don’t want to provide an option to login to Discourse directly. Our idea here is to take such users to the Bob.ai with a message that they have to login to our app to access the community. You seem to be suggesting the same. Users who are logged into our app should be able to access the community as though the community is just part of our app.

To achieve this is there a configuration option in Discourse to tell the users who are not logged into our app to go to Bob.ai instead of Auth0? Is that all that we need to do?

4

Does bob.ai use Auth0? Typically, when you configure one of those external authentication services Discourse sends users to that service when they try to log in.