Hi guys, For about 4 weeks or longer I have been working on SSO between Auth0 and discourse, on and off. I have gone for different solutions and had to change my approach a few times. I am now at a point where I need further advice. 1- I started by using the SSO approach mentioned in this article: https://blog.leog.me/discourse-sso-with-auth0-e49486d0294a Recently it has come to light that the redirect approach mentioned in this article (redirecting from auth0 rule to discourse via the SSO login url) results in an incomplete login on Auth0 end, hence a customer login is not registered, which impacts the SSO cookie etc on Auth0 side. So we have to move away from this approach. 2- I have now deployed the 0auth2 plugin and am using the approach specified below: [图片] Configure sign up and log in with Auth0 using the OAuth2 Basic Plugin Integrations If you are using Auth0 as your identity provider this guide will show you how to setup authentication using the Discourse OAuth2 Basic Plugin. Initial Steps Create an Auth0 account if you don’t already have one The Discourse OAuth2 Basic Plugin ships pre-installed with Discourse. If you are self-hosted, ensure the plugin is enabled. For hosted plans, the plugin is available on Business tier and above. Configure Auth0 Applications → Create Application Give your client a name like “Discourse… The issue I have now is the “requirement to verify email” before discourse creates the user record and logs the user in. Is there no way to turn this feature off via the dashboard config? What is the best approach to work around this if the feature cant be turned off? I dont want the user to have to verify the email in discourse. I have found a few articles but the seem overly complicated. Regards shahid

hi blake, thanks for that. I did actually switch that on, but still get the message on the login page about email being unverified?

What do you have set in the “oauth2 json email path” box? [image] Maybe that isn’t set correctly

Does that assume the upstream Oauth2 IdP has verified email addresses?

Okay can you look in your logs and see if you see anything? Also could you look at one of the new users and see if they actually have an email address?

is the user record in discourse only created after the verification? if i go in as admin, should i see the record?

They should be in there before verification. You may need to click on the new tab and/or sort by created date /admin/users/list/new?order=created

interesting… as the users are not there

OAuth2 插件 SSO 如何关闭邮箱验证

产品支持 SSO

话题		回复	浏览量
Disable email verification for SSO Product Support	12	4216	2021 年9 月 17 日
Configure sign up and log in with Auth0 using the OAuth2 Basic Plugin Integrations sso , oauth2 , auth-plugins , how-to	73	21155	2025 年12 月 16 日
Use OAuth Plugin for Auth0 more seamlessly SSO	10	1583	2024 年12 月 11 日
SSO and Auth0 SSO	3	640	2024 年9 月 20 日
Discourse OAuth2 Basic Plugin official , oauth2 , auth-plugins , included-in-core	30	68383	2025 年7 月 24 日

OAuth2 插件 SSO 如何关闭邮箱验证

相关话题