# Is "partial" SSO possible?
**URL:** https://meta.discourse.org/t/is-partial-sso-possible/185848
**Category:** Support
**Created:** [April 7, 2021, 8:25am UTC](https://meta.discourse.org/t/is-partial-sso-possible/185848 "2021-04-07T08:25:05Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@rodypl](https://meta.discourse.org/u/rodypl)
#### Post date: [April 7, 2021, 8:25am UTC](https://meta.discourse.org/t/is-partial-sso-possible/185848/1 "2021-04-07T08:25:05Z")
I’m not a developer, so I don’t even know what to search to find the answer to my question. I’m currently trialing Discourse right now and how users log in have been on my mind a lot.
At the start of my trial I was convinced SSO was the way I would go once my trial was over, but now I’m not so sure. It seems like I’d lose some nice Discourse features if I enabled SSO (like the invite features) and I don’t know if there advantage in my case is worth it.
Is it possible to have my forum use both the built in Discourse accounts AND my site’s account? Similar to how you can set up “or Log in with Facebook/Google/Apple” options?
You know how when a user tries to log in/create an account they’re presented with the email/password fields, but on the right of that it gives them options to log in with Facebook, Google, etc? Could I simply have my site’s account be one of these options on the right?
So if a user just wants to use my main site’s login and not create a new account specifically for the forum they could, but they wouldn’t be required for it.
Is this possible? And is this advisable? As in, are there any reasons why I shouldn’t go this route? Thanks!
---
### Author:  [@david](https://meta.discourse.org/u/david)
#### Post date: [April 7, 2021, 9:10am UTC](https://meta.discourse.org/t/is-partial-sso-possible/185848/2 "2021-04-07T09:10:05Z")
> [@rodypl](#):
>
> You know how when a user tries to log in/create an account they’re presented with the email/password fields, but on the right of that it gives them options to log in with Facebook, Google, etc? Could I simply have my site’s account be one of these options on the right?
It depends on what you mean by “SSO”:
- If you’re talking about [Setup DiscourseConnect - Official Single-Sign-On for Discourse (sso)](https://meta.discourse.org/t/discourseconnect-official-single-sign-on-for-discourse-sso/13045), then you cannot use it alongside other login options.
- If you’re talking about OAuth2, OpenID Connect, or any of our other authentication plugins, then yes they can be used alongside each other, and alongside email/password login.
> [@rodypl](#):
>
> (like the invite features)
Good news on that front - we’ve recently added invite support for [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true)
[https://github.com/discourse/discourse/commit/355d51afde190b884dbb9b81ebc836a16b48d98c](https://github.com/discourse/discourse/commit/355d51afde190b884dbb9b81ebc836a16b48d98c)
And for other login methods:
[https://github.com/discourse/discourse/commit/ce04db861033c906830fd07ae98b3d0cb375c753](https://github.com/discourse/discourse/commit/ce04db861033c906830fd07ae98b3d0cb375c753)
These changes are live in the latest version of Discourse
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [April 7, 2021, 10:35am UTC](https://meta.discourse.org/t/is-partial-sso-possible/185848/3 "2021-04-07T10:35:47Z")
You can do that by implementing oauth2 on your server so that it could function like Google and github and friends. (Or having someone do that, since you’re not a developer.)
---
### Author:  [@rodypl](https://meta.discourse.org/u/rodypl)
#### Post date: [April 7, 2021, 1:18pm UTC](https://meta.discourse.org/t/is-partial-sso-possible/185848/4 "2021-04-07T13:18:17Z")
> [@david](#):
>
> If you’re talking about OAuth2, OpenID Connect, or any of our other authentication plugins, then yes they can be used alongside each other, and alongside email/password login.
Thanks! Could you link me to documentation about that please?
---
### Author:  [@david](https://meta.discourse.org/u/david)
#### Post date: [April 7, 2021, 1:24pm UTC](https://meta.discourse.org/t/is-partial-sso-possible/185848/5 "2021-04-07T13:24:48Z")
Those two plugins can be found at:
> [@Discourse OpenID Connect (OIDC)](https://meta.discourse.org/t/openid-connect-authentication-plugin/103632):
>
> discourse2Summary Discourse OpenID Connect allows an OpenID Connect provider to be used as an authentication provider for Discourse.open_bookInstall Guide This plugin is bundled with Discourse core. There is no need to install the plugin separately. Features The plugin aims to provide a minimal implementation of [the specification](https://openid.net/specs/openid-connect-basic-1_0.html). Specifically, it supports the “Authorization Code Flow”. To get started, follow [the plugin installation instructions](https://meta.discourse.org/t/install-plugins-in-discourse/19157), or contact your hosti…
> [@Discourse OAuth2 Basic](https://meta.discourse.org/t/oauth2-basic-support/33879):
>
> discourse2Summary Discourse OAuth2 Basic supports basic OAuth2 providers, assuming they have a JSON API endpoint where user details can be retrieved by token.open_bookInstall Guide This plugin is bundled with Discourse core. There is no need to install the plugin separately. Features This plugin allows you to use a basic OAuth2 provider as authentication for Discourse. It should work with many providers, with the caveat that they must provide a JSON endpoint for retri…
---
### Author:  [@Himanshu\_Singh](https://meta.discourse.org/u/Himanshu_Singh)
#### Post date: [May 21, 2021, 6:37pm UTC](https://meta.discourse.org/t/is-partial-sso-possible/185848/6 "2021-05-21T18:37:30Z")
I am excited to see the compatibility feature between SSO and invites but it does not seem to work on my end.
My main site is on WordPress and I am using the [WP Discourse](https://github.com/discourse/wp-discourse) plugin to integrate the two applications. I also have a registration form that conducts email authentication on WordPress and I have written custom code to prevent Discourse from sending duplicate verification emails to users on registration. I have enabled `must_approve_users` in discourse to prevent anyone for accessing the community without approval.
I followed the following steps and user was not approved in the end. Just like before.
1. Invite user with the email address
2. User opens the email invite and click on the link
3. User is directed to the discourse logged out page with a welcome message and CTA to continue
4. Clicking on the CTA takes the user to the login page on WordPress
5. As the user is not registered on WordPress, I had to create a new account for the user - which _I think_ makes sense since WordPress does not know that Discourse invited this user.
6. After registration, I receive a confirmation email from WordPress. I click on that email and I am directed to the login page in WordPress.
7. After logging in WordPress, I try to the community but I cannot.
8. I go to the admin account and check the status of the user and as I suspected, it is Needs approval. This is exactly the same situation I had before sending an invite.
What am I missing here? Is there some other flow I need to follow? Can I only invite users that are already registered on WordPress? Looking for some guidance here. Thank you.
My Discourse Version: 2.8.0.beta1