# Automatic authentication from many different URIs

**URL:** <https://meta.discourse.org/t/automatic-authentication-from-many-different-uris/45018>\
**Category:** SSO\
**Created:** [31 Mayo, 2016 03:17 UTC](https://meta.discourse.org/t/automatic-authentication-from-many-different-uris/45018 "2016-05-31T03:17:41Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)\
**Post date:** [31 Mayo, 2016 07:48 UTC](https://meta.discourse.org/t/automatic-authentication-from-many-different-uris/45018/3 "2016-05-31T07:48:18Z")

</div>

> [@mpalmer](#):
>
> Another option, which isn’t necessarily any “safer” but does allow you to use a stock Discourse instance, would be to implement an oauth2 provider external to Discourse, which itself knew all about whatever custom auth protocol you cooked up.

A similar approach is to develop a small web service that acts as a SSO endpoint for Discourse, and handles authentication as you explained. I’d prefer SSO if your are certain that only users of your app should use Discourse, and prefer oauth2 if you _also_ want to support different ways to log in (e.g. for potential customers).

---

_[View the full topic](https://meta.discourse.org/t/automatic-authentication-from-many-different-uris/45018)._