# Is it possible to piggyback Discourse authentication?

**URL:** https://meta.discourse.org/t/is-it-possible-to-piggyback-discourse-authentication/180235
**Category:** Support
**Created:** [February 18, 2021, 5:55pm UTC](https://meta.discourse.org/t/is-it-possible-to-piggyback-discourse-authentication/180235 "2021-02-18T17:55:59Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Nacho\_Caballero](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/nacho_caballero/32/130189_2.png) [@Nacho\_Caballero](https://meta.discourse.org/u/Nacho_Caballero)
#### Post date: [February 18, 2021, 5:55pm UTC](https://meta.discourse.org/t/is-it-possible-to-piggyback-discourse-authentication/180235/1 "2021-02-18T17:55:59Z")

</div>

I’m developing a simple Express app and I was planning to embed it as an iframe in a page in my login-required Discourse site.

This might be naïve on my part, but is there a way to leverage the fact that users have already authenticated in Discourse?

That way they could use the app with the same user credentials and they wouldn’t have log in again.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [February 18, 2021, 8:46pm UTC](https://meta.discourse.org/t/is-it-possible-to-piggyback-discourse-authentication/180235/2 "2021-02-18T20:46:36Z")

</div>

You’d need to take advantage of [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true) aka SSO.