# How can I authenticate 3rd party website using discourse?

**URL:** https://meta.discourse.org/t/how-can-i-authenticate-3rd-party-website-using-discourse/219309
**Category:** Support
**Created:** [February 24, 2022, 7:44pm UTC](https://meta.discourse.org/t/how-can-i-authenticate-3rd-party-website-using-discourse/219309 "2022-02-24T19:44:18Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Devarsh\_Mavani](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/devarsh_mavani/32/251071_2.png) [@Devarsh\_Mavani](https://meta.discourse.org/u/Devarsh_Mavani)
#### Post date: [February 24, 2022, 7:44pm UTC](https://meta.discourse.org/t/how-can-i-authenticate-3rd-party-website-using-discourse/219309/1 "2022-02-24T19:44:18Z")

</div>

So here is the scenario. i have 1 web application which is a utility. and i have setup discourse on my own servers. now i want the users on my platform to directly post question on my hosted discourse community using rest api. for that i need to authenticate user on that discourse platform (make sure that user is authenticated to post question from his/her account). So is there any way i can have a button something like “Login using Discourse Community” which is just like google oauth. or is it possible to login by sending credentials using REST API?

---

<div class="post-metadata">

### Author: ![Alexander](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/alexander/32/497634_2.png) [@Alexander](https://meta.discourse.org/u/Alexander)
#### Post date: [February 24, 2022, 7:57pm UTC](https://meta.discourse.org/t/how-can-i-authenticate-3rd-party-website-using-discourse/219309/2 "2022-02-24T19:57:41Z")

</div>

> [@Use Discourse as an identity provider (SSO, DiscourseConnect)](https://meta.discourse.org/t/using-discourse-as-an-identity-provider-sso-discourseconnect/32974):
>
> So you want to use Discourse as an identity provider for your own web app? Great! Let’s get started. Enable [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true) provider setting Under Discourse admin site settings (/admin/site\_settings) enable setting enable discourse connect provider and add a secret string to discourse connect provider secrets (used to hash SSO payloads). Implement [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true) in your web app: Generate a random [nonce](https://en.wikipedia.org/wiki/Cryptographic_nonce). Let’s call this value NONCE. Save it temporarily so that you can verify it with the …

I think this might cover what you need

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [March 31, 2022, 12:17pm UTC](https://meta.discourse.org/t/how-can-i-authenticate-3rd-party-website-using-discourse/219309/3 "2022-03-31T12:17:54Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.
