# Need help to setup SSO without emails **URL:** \ **Category:** SSO\ **Created:** [April 27, 2020, 10:17pm UTC](https://meta.discourse.org/t/need-help-to-setup-sso-without-emails/149524 "2020-04-27T22:17:14Z")\ **Posts on this page:** 1\ **Showing post:** 1
**Author:** ![gaurang.prasad](https://avatars.discourse-cdn.com/v4/letter/g/0ea827/32.png) [@gaurang.prasad](https://meta.discourse.org/u/gaurang.prasad)\ **Post date:** [April 27, 2020, 10:17pm UTC](https://meta.discourse.org/t/need-help-to-setup-sso-without-emails/149524/1 "2020-04-27T22:17:14Z")
My website (a MediaWiki-based wiki) only uses a username and password (email is optional for users to register). I have Discourse up-and-running, and have SSO enabled in admin settings. Clicking on log-in on Discourse redirects to my site’s log-in page with a nonce. I’m going through the [official Discourse SSO instructions](https://meta.discourse.org/t/official-single-sign-on-for-discourse-sso/13045) and it says: > ⚠ Discourse uses emails to map external users to Discourse users, and assumes that external emails are secure. **IF YOU DO NOT VALIDATE EMAIL ADDRESSES BEFORE SENDING THEM TO DISCOURSE, YOUR SITE WILL BE EXTREMELY VULNERABLE!** I have a few questions regarding SSO: 1. Just to clarify - once I have SSO working, all the registered users in my site can access Discourse ‘logged-in’ without having to register first in Discourse, right? 2. I want to disable all email-related features on Discourse (since we don’t enforce email on our website). So, no emails from Discourse, or to Discourse (for replies, etc.). 3. If I created a dummy email in my website’s SSO code (something like unique\_id@domain.xyz) for each user and send that in the payload, will that be fine? 4. How do I go about getting SSO to work in my case - any other suggestions/ tips? Thanks! --- _[View the full topic](https://meta.discourse.org/t/need-help-to-setup-sso-without-emails/149524)._