# Disabling "SSO Overrides Username"

**URL:** https://meta.discourse.org/t/disabling-sso-overrides-username/35841
**Category:** SSO
**Tags:** discourseconnect
**Created:** [Novembro 20, 2015, 2:32pm UTC](https://meta.discourse.org/t/disabling-sso-overrides-username/35841 "2015-11-20T14:32:33Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![john\_mardlin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/john_mardlin/32/115622_2.png) [@john\_mardlin](https://meta.discourse.org/u/john_mardlin)
#### Post date: [Novembro 20, 2015, 2:32pm UTC](https://meta.discourse.org/t/disabling-sso-overrides-username/35841/1 "2015-11-20T14:32:34Z")

</div>

We’ve been running our site with “SSO Overrides Username” enabled so far, and plan to disable it. A few questions before we do:

- Will the username still be initially pulled from SSO, but now be changeable in user’s profile settings?
- If so, what will happen if there is a username conflict between a pre-existing username and a new username taken from SSO?

Are there any considerations we might not have thought of?

---

<div class="post-metadata">

### Author: ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [Novembro 20, 2015, 5:42pm UTC](https://meta.discourse.org/t/disabling-sso-overrides-username/35841/2 "2015-11-20T17:42:49Z")

</div>

According to my understanding:

The username provided via SSO is now considered a _suggested default_. Users can change it if they want. It is also modified if the username is already taken: In this case, the new user does not get the username from the SSO payload but an automatically generated alternative. (In theory, this can also happen with this setting enabled, e.g. if you have multiple similar usernames with characters not allowed in Discourse usernames.)

This should not affect anything else, as all matching between the SSO payload and Discourse users is leveraging the external ID or mail if needed.

---

<div class="post-metadata">

### Author: ![john\_mardlin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/john_mardlin/32/115622_2.png) [@john\_mardlin](https://meta.discourse.org/u/john_mardlin)
#### Post date: [Novembro 22, 2015, 12:12am UTC](https://meta.discourse.org/t/disabling-sso-overrides-username/35841/3 "2015-11-22T00:12:45Z")

</div>

Thanks!

What if we re-enable it in the future? Will usernames revert to match SSO?

---

<div class="post-metadata">

### Author: ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [Novembro 22, 2015, 10:02am UTC](https://meta.discourse.org/t/disabling-sso-overrides-username/35841/4 "2015-11-22T10:02:52Z")

</div>

If you enable the setting again, users will immediately lose the ability to change their username on your site.

On each logon, the users’ name will be reverted to the one from the payload, if possible. Of course, this might not be possible (another user might already use that username), so users might still get suggested usernames that differ from the SSO one.  
Assuming your SSO only provides username that are legal in Discourse and all user log in regularly, after some time, the usernames will all match again.

---

<div class="post-metadata">

### Author: ![JammyDodger](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jammydodger/32/254611_2.png) [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [Junho 8, 2024, 12:45pm UTC](https://meta.discourse.org/t/disabling-sso-overrides-username/35841/5 "2024-06-08T12:45:58Z")

</div>

Este tópico foi automaticamente fechado após 3122 dias. Novas respostas não são mais permitidas.
