# Custom SSO not working after secure\_session added as a parameter

**URL:** https://meta.discourse.org/t/custom-sso-not-working-after-secure-session-added-as-a-parameter/182655
**Category:** SSO
**Created:** [March 9, 2021, 5:20pm UTC](https://meta.discourse.org/t/custom-sso-not-working-after-secure-session-added-as-a-parameter/182655 "2021-03-09T17:20:46Z")
**Posts on this page:** 1
**Showing post:** 5

<div class="post-metadata">

### Author: ![simon](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/simon/32/339122_2.png) [@simon](https://meta.discourse.org/u/simon)
#### Post date: [March 11, 2021, 6:57pm UTC](https://meta.discourse.org/t/custom-sso-not-working-after-secure-session-added-as-a-parameter/182655/5 "2021-03-11T18:57:42Z")

</div>

I’m wondering if setting the new `discourse_connect_csrf_protection` site setting to `false` will fix the issue for you. That site setting is hidden, so it needs to be set from the Rails console. You can find details about it in the replies to this topic: [DiscourseConnect flow no longer functions](https://meta.discourse.org/t/discourseconnect-flow-no-longer-functions/182844).

---

_[View the full topic](https://meta.discourse.org/t/custom-sso-not-working-after-secure-session-added-as-a-parameter/182655)._