We use SSO, and since a few days, some of our members are reporting being unable to access their account with the error: There is a problem with your account. Please contact the site’s administrator I thought this could be due to an issue I previously reported , so I checked if their IP address w…

[image] mentalstring: they seem to be added automatically when we close someone’s account through the API So that’s the issue you need to resolve. I’d look at How to reverse engineer the Discourse API .

The issue with IPs being added to Screened IPs is a separate one from what I’m trying to report here. We are seeing members not blocked by the Screened IPs that can’t login into their account via SSO, supposedly because IP address is blocked. Are there more places other than Screened IPs that may b…

[image] mentalstring: we never add any IPs do the Screened IPs — they seem to be added automatically when we close someone’s account through the API (see link above) It sounds like you are calling the “delete as spammer” function, which will automatically blocklist the IP and email address. I…

That may be true, but how we are deleting users is being discussed here . Not sure if this is a separate issue, but I noticed that the Matches column on Screened IPs section shows 0 matches in all entries. I looked at the export of that table and it confirms that all IPs have 0 matches. Yet, every d…

I think I found the issue here (in the end the issue was on our side) but there’s some bugs to report, although this is not a stack I’m comfortable with, so hopefully someone can take a better look. First, the cause. Looking at the screened_ip_addresses database table directly, I found it was block…

[image] mentalstring: Is there any button in the Discourse admin to block an entire /16 block in one go!? Yet again, I gotta tell you that I’m pretty sure you are calling “delete as spammer” from the API. If there are enough spammer deletions from related IP addresses, the IP address ban star…

The issue was not the end point used but the parameters as the API expects bools to be the strings ‘true’/‘false’ and I wasn’t aware of it. There’s still some other bugs I bumped into mentioned above that I don’t know if they are to be addressed. Otherwise, this can be closed. Thank you.

Can't SSO due to blocked IP addresses

Support SSO

pfaffman (Jay Pfaffman) June 4, 2021, 12:39am 2

So that’s the issue you need to resolve. I’d look at How to reverse engineer the Discourse API.

Topic		Replies	Views
Does SSO make use of Screened IP Addresses to block registrations? SSO	8	901	October 29, 2020
SSO and Screened IPs SSO rest-api	8	1655	June 14, 2021
Spammers signing up from "blocked" IP addresses Support	9	1418	May 27, 2015
Can't search blocked IPs Feature	7	1796	February 10, 2015
How to block an IP range? "Screened IPs" not being blocked Support	22	376	December 5, 2025

Can't SSO due to blocked IP addresses

Related topics