Can I do SSO without email addresses?


(Andy Rothfusz) #1

I’m considering Discourse for my users, but I don’t always have a verified email address for them. When I don’t have a verified email address, I do have some other verified means of reaching them.

It looks like Discourse SSO requires an email address for each user. Why? I’d like my users to authenticate through my system and I don’t require an email address for them.


(Sam Saffron) #2

A lot of the functions in discourse rely on having an email to reach the users, that said, if you are comfortable giving that up for the particular users, why not synthesise an email?


(Andy Rothfusz) #3

Thanks Sam, I’ll think about it. I may also be able to ensure email collection, now that I’ve thought about it a bit more.


(Kane York) #4

Remember that your sso page can redirect them to a “fill out your email” page instead of signing the sso payload.