# Email activation when using SSO

**URL:** <https://meta.discourse.org/t/email-activation-when-using-sso/28861>\
**Category:** Feature\
**Tags:** sso, approval, discourseconnect\
**Created:** [15 Maggio 2015, 2:28pm UTC](https://meta.discourse.org/t/email-activation-when-using-sso/28861 "2015-05-15T14:28:11Z")\
**Posts on this page:** 1\
**Showing post:** 10

<div class="post-metadata">

**Author:** ![plkap74](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/plkap74/32/116106_2.png) [@plkap74](https://meta.discourse.org/u/plkap74)\
**Post date:** [19 Maggio 2015, 1:36pm UTC](https://meta.discourse.org/t/email-activation-when-using-sso/28861/10 "2015-05-19T13:36:42Z")

</div>

> [@codinghorror](#):
>
> the root cause is badly designed SSO from the parent site that lets poorly vetted accounts through

I really think that it isn’t “badly designed SSO”. Other applications **are not forums** and do not necessarily share the same concept of vetted accounts.

> [@nahtnam](#):
>
> I’m fine with this idea as long as there is a way to turn it off…

Yeah in my implementation there is a site setting that controls whether SSO trusts emails or not. Default would remain the same: all new accounts through SSO would be trusted.

---

_[View the full topic](https://meta.discourse.org/t/email-activation-when-using-sso/28861)._