thanks for explaining my scenario better than me 
Yes, my app authenticates against Auth0 and I do not want discourse to directly go to Auth0 anymore.
Discourse, as you mentioned, should do SSO against my app.
Having said this, am I right in my understanding that the discourse SSO_URL config now simply needs to point back to my application instead of Auth0.
Thanks again