Brajmohan_Kumar is experiencing an issue with login and logout after enabling SSO on their Discourse forum. When a user logs out and tries to log in again, they are automatically logged in without entering credentials. Brajmohan_Kumar wants users to log in only to the forum, not the main website, so they need to enter credentials after logging out. fefrei suggests implementing this on the SSO master application side, by asking for credentials and redirecting back without creating a permanent session when Discourse sends over a user to sign in.
I have recently enabled SSO, after that when I log out from my discourse forum and then try to log in again then my account automatically logged in without entering my credential.
I know it is happening because of SSO, but I don’t want a user to log out from my forum when they are not logged in to my main website.
If a user is logging in to my forum then it should only for the forum not for the main website, So that when they log out then after login again they need to put credential to continue, how can I do so?
That sounds like it’s to be implemented entirely on the side of your SSO master application: When Discourse sends over a user to sign it, it should ask for credentials and redirect back without creating a permanent session.
If your SSO master is an application you’ve developed yourself, you should be able to add this
