# خطأ غير صالح في nonce

**URL:** <https://meta.discourse.org/t/invalid-nonce-error/83264>\
**Category:** SSO\
**Created:** [19 مارس 2018، 12:56ص UTC](https://meta.discourse.org/t/invalid-nonce-error/83264 "2018-03-19T00:56:44Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)\
**Post date:** [19 مارس 2018، 10:34ص UTC](https://meta.discourse.org/t/invalid-nonce-error/83264/6 "2018-03-19T10:34:59Z")

</div>

Wait a second.

> [@shahidmir](#):
>
> Client logs into my app via Auth0 authentication.

I’m reading this as:

- You’ve developed an application.
- You don’t handle logins into your application yourself, you use Auth0 for that.
- You want Discourse to do SSO _against your application_, not against Auth0 directly.

If that’s the case, Auth0 doesn’t have anything to do with Discourse specifically. (If you want Discourse to authenticate against Auth0 directly, there are some topics on that, but I personally have no idea how that works.)

> [@shahidmir](#):
>
> Also, cant work out what params need to be sent to /session/sso URL?

None 🙂

The flow is:

- You send the user to Discourse’s `/session/sso` URL, no parameters required.
- Discourse sends the user back to you, carrying the nonce.
- You sign the request and send the user to Discourse, submitting your signed ticket.

---

_[View the full topic](https://meta.discourse.org/t/invalid-nonce-error/83264)._