# Disable activation email requirement for invited users (SSO)
**URL:** https://meta.discourse.org/t/disable-activation-email-requirement-for-invited-users-sso/303545
**Category:** Feature
**Tags:** sso, wordpress, invites
**Created:** [April 12, 2024, 11:02am UTC](https://meta.discourse.org/t/disable-activation-email-requirement-for-invited-users-sso/303545 "2024-04-12T11:02:48Z")
**Posts on this page:** 11
**Page:** 1
### Author:  [@Shauny](https://meta.discourse.org/u/Shauny)
#### Post date: [April 12, 2024, 11:02am UTC](https://meta.discourse.org/t/disable-activation-email-requirement-for-invited-users-sso/303545/1 "2024-04-12T11:02:48Z")
I believe this is already how it works if you don’t have SSO - a user who is invited via email doesn’t need to activate their email, as the email link itself counts as the activation.
However I’m using WordPress as the SSO and if I invite someone there is a laborious process of first being sent to the login screen, having to click register, fill out the form, then need to validate my email, then when you finally land on the forum you have to click “login”, all before getting in.
Is there a way I can:
- Make the invite link default to going to my _Register_ page, not the login page
- Skip the need to activate email
This would help a lot! Thanks.
---
### Author:  [@angus](https://meta.discourse.org/u/angus)
#### Post date: [April 15, 2024, 7:02am UTC](https://meta.discourse.org/t/disable-activation-email-requirement-for-invited-users-sso/303545/2 "2024-04-15T07:02:32Z")
Hey Shaun, sorry but I’m a little confused.
> [@Shauny](#):
>
> if I invite someone
Where are you sending this invite from? Could you walk me through the steps that currently happen, e.g.
1. I go to wordpress
2. I fill out a new user form to invite a user…
And the steps you’d like to happen, e.g.
1. I go to wordpress
2. I…
---
### Author:  [@Shauny](https://meta.discourse.org/u/Shauny)
#### Post date: [April 15, 2024, 8:19am UTC](https://meta.discourse.org/t/disable-activation-email-requirement-for-invited-users-sso/303545/3 "2024-04-15T08:19:30Z")
Hey no sorry for the confusion I mean using the Discourse invite system.
I want to encourage people to invite their friends and get the badges related to that. But currently the sign up process is very tedious after being invited.
Also FYI I had it set to make invited people TL1 but it ignored that in my testing and set it to TL0.
---
### Author:  [@angus](https://meta.discourse.org/u/angus)
#### Post date: [April 15, 2024, 10:52am UTC](https://meta.discourse.org/t/disable-activation-email-requirement-for-invited-users-sso/303545/4 "2024-04-15T10:52:22Z")
Ok, I see. In that case
> [@Shauny](#):
>
> - Make the invite link default to going to my _Register_ page, not the login page
As far as I understand it, it is not currently possible for a [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true) Provider client to distinguish between a login request originating from an invite and a login request originating from a normal login. In other words, this is how it works
1. User A creates an invite in Discourse.
2. User B goes to invite link (in Discourse).
3. Because [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true) is setup Discourse redirects User B to Wordpress.
Currently, I don’t think it’s possible for the [WP Discourse](https://github.com/discourse/wp-discourse) plugin to distinguish between a request coming in like 3 (i.e. redirect from an invite) and a request coming in from when a user just clicks “log in” in Discourse. In other words you’d have to redirect all incoming authentication requests to registration, which is probably not what you want.
@david Just double checking, is that correct 👆?
---
### Author:  [@david](https://meta.discourse.org/u/david)
#### Post date: [April 15, 2024, 11:53am UTC](https://meta.discourse.org/t/disable-activation-email-requirement-for-invited-users-sso/303545/5 "2024-04-15T11:53:01Z")
> [@angus](#):
>
> it is not currently possible for a [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true) Provider client to distinguish between a login request originating from an invite and a login request originating from a normal login
Yeah that sounds correct to me 👍
---
### Author:  [@angus](https://meta.discourse.org/u/angus)
#### Post date: [April 15, 2024, 12:34pm UTC](https://meta.discourse.org/t/disable-activation-email-requirement-for-invited-users-sso/303545/6 "2024-04-15T12:34:51Z")
@Shauny In short, there’d need to be an update in the [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true) protocol itself (i.e. how it works in Discourse) for the invite flow to work in the way you want.
---
### Author:  [@Shauny](https://meta.discourse.org/u/Shauny)
#### Post date: [April 15, 2024, 1:47pm UTC](https://meta.discourse.org/t/disable-activation-email-requirement-for-invited-users-sso/303545/7 "2024-04-15T13:47:58Z")
Ok. And what about the verification email? It knows the email address was invited so can’t it skip that extra step?
---
### Author:  [@angus](https://meta.discourse.org/u/angus)
#### Post date: [April 15, 2024, 1:55pm UTC](https://meta.discourse.org/t/disable-activation-email-requirement-for-invited-users-sso/303545/8 "2024-04-15T13:55:47Z")
Removing the verification email, besides being insecure, has the same issue.
There’s no way to distinguish between the scenario you’re envisaging and other scenarios on the Wordpress side of things. Even if that were possible, it’d still not be advisable as you can share an invite link without ever emailing it to someone.
So, the auto-redirect to registration may be possible if there’s an update to the [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true) protocol, but removing email verification is probably not possible (without compromising the security of your site).
---
### Author:  [@Shauny](https://meta.discourse.org/u/Shauny)
#### Post date: [April 15, 2024, 3:06pm UTC](https://meta.discourse.org/t/disable-activation-email-requirement-for-invited-users-sso/303545/9 "2024-04-15T15:06:09Z")
> [@angus](#):
>
> removing email verification is probably not possible (without compromising the security of your site).
But if you email the invite link and they click the link from the email, you’ve already verified their email address. If you don’t use SSO, this all just works and no further email verification is required!
---
### Author:  [@Firepup650](https://meta.discourse.org/u/Firepup650)
#### Post date: [April 15, 2024, 4:49pm UTC](https://meta.discourse.org/t/disable-activation-email-requirement-for-invited-users-sso/303545/10 "2024-04-15T16:49:32Z")
From what I understand, in it’s current state, there is no way for Discourse to tell the SSO provider that the email was verified by an invite, and the SSO isn’t telling Discourse that either.
---
### Author:  [@Earnie\_Baird](https://meta.discourse.org/u/Earnie_Baird)
#### Post date: [April 26, 2024, 9:35am UTC](https://meta.discourse.org/t/disable-activation-email-requirement-for-invited-users-sso/303545/11 "2024-04-26T09:35:37Z")
There really should be a way to remove email activation in the core product. I have Discourse set up with SSO and the email verification step is adding a lot of friction for new users.
There is this plugin which turns it off but unfortunately I don’t have access to install plugins where I’m hosting (and it doesnt seem to work for everyone): [Disable Email Verification for Discourse Plugin](https://meta.discourse.org/t/disable-email-verification-for-discourse-plugin/280874)
It’s quite frustrating not being able to turn email activation off and there are many posts over the years with different people struggling with this. The core product should let Admins run a server the way they want.