# Authorization from a desktop application (and base domain site)

**URL:** <https://meta.discourse.org/t/authorization-from-a-desktop-application-and-base-domain-site/134000>\
**Category:** Product Support\
**Created:** [November 21, 2019, 6:47am UTC](https://meta.discourse.org/t/authorization-from-a-desktop-application-and-base-domain-site/134000 "2019-11-21T06:47:59Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![tytel](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/tytel/32/125606_2.png) [@tytel](https://meta.discourse.org/u/tytel)\
**Post date:** [November 21, 2019, 6:47am UTC](https://meta.discourse.org/t/authorization-from-a-desktop-application-and-base-domain-site/134000/1 "2019-11-21T06:47:59Z")

</div>

I recently setup SSO so users can login to my top domain site ([mysite.com](http://mysite.com)) using their discourse login running on a subdomain ([forum.mysite.com](http://forum.mysite.com)). Now I’m running into trouble because I also want to login to discourse from a desktop application.

A little background: I’m running an invite-only software beta for this desktop app and I’d want to make sure the user has access to the forum before starting up the desktop app.

Ideally I would have a basic form in my desktop app and make a post request to the forum to verify the user. I was thinking if Discourse was an OAuth2 provider it would work? I don’t think it is and I can’t find a way to do what I want but maybe I’m missing something.

I realize this is a weird use case and I’m new to the whole users/SSO/OAuth/etc world so if I’m falling down the wrong rabbit whole I’d appreciate if someone would throw me a rope 😊

---

_[View the full topic](https://meta.discourse.org/t/authorization-from-a-desktop-application-and-base-domain-site/134000)._