Anonymising a user with SSO, keeps being recreated

[Shauny (Shaun Robinson)]

I am using SSO from WordPress to Discourse.

If I anonymise a user, with the intention of removing the name and picture against all their posts (the user is banned), then if that user logs in again in WordPress it allows them to create a brand new account in Discourse based on their profile, which essentially unbans them as a new account.

This is a problem. Is there a way to mark some people in the system as “Do not let them create a new account with this same email address” or something?

[angus (Angus McLeod)]

Hey @Shauny sorry for missing this. We have a dedicated Support > WordPress category which is watched closely for Wordpress issues. What I would suggest here is the approach detailed in this post.

How to prevent some WP users from being able to login to Discourse

There is a wpdc_sso_provider_before_sso_redirect action hook that can be used to bypass SSO. The hook is fired right before the SSO login redirect to Discourse. It is passed the current WordPress user_id and user object as parameters: https://github.com/discourse/wp-discourse/blob/master/lib/sso-provider/discourse-sso.php#L189. The basic idea is that if a user doesn’t meet the condition you have set for logging into Discourse, you redirect them to some page and then call exit. If the user does …

Let me know how you go with that.

[tobiaseigen]

@Shauny were you able to work this out? I moved this to Support > WordPress.

[Shauny (Shaun Robinson)]

Yes I used the info in the linked post and it worked thanks.

[tobiaseigen]

Awesome! I think you should be able to indicate the post that is the solution on the post menu. Select that and the solution will be displayed at the top for future travelers and this topic will be scheduled for closure.