# Drupal SSO generates incorrect user sessions

**URL:** <https://meta.discourse.org/t/drupal-sso-generates-incorrect-user-sessions/140176>\
**Category:** SSO\
**Created:** [January 29, 2020, 10:43pm UTC](https://meta.discourse.org/t/drupal-sso-generates-incorrect-user-sessions/140176 "2020-01-29T22:43:15Z")\
**Posts on this page:** 1\
**Showing post:** 14

<div class="post-metadata">

**Author:** ![simon](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/simon/32/339122_2.png) [@simon](https://meta.discourse.org/u/simon)\
**Post date:** [January 30, 2020, 6:58pm UTC](https://meta.discourse.org/t/drupal-sso-generates-incorrect-user-sessions/140176/14 "2020-01-30T18:58:41Z")

</div>

> [@brvoigt](#):
>
> Would this be the right place to learn more about the API auth deprecation? [Discourse API Documentation](https://meta.discourse.org/t/discourse-api-documentation/22706)

Yes, the example `POST` request that’s given at the start of that topic has the information that you need. To fix the Drupal Discourse module to use header based authentication would only require a small change to its code.

Assuming that your Discourse site is up to date, there is probably a warning about using deprecated authentication methods for API requests on your Discourse admin dashboard.

---

_[View the full topic](https://meta.discourse.org/t/drupal-sso-generates-incorrect-user-sessions/140176)._