# Aperçu : Single Sign-On (SSO) / OAuth2 (ce graphique est-il correct ?)

**URL:** https://meta.discourse.org/t/overview-single-sign-on-sso-oauth2-is-this-chart-correct/90231
**Category:** Self-hosting
**Created:** [Juin 19, 2018, 5:00 UTC](https://meta.discourse.org/t/overview-single-sign-on-sso-oauth2-is-this-chart-correct/90231 "2018-06-19T17:00:11Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![forumquestions](https://avatars.discourse-cdn.com/v4/letter/f/85e7bf/32.png) [@forumquestions](https://meta.discourse.org/u/forumquestions)
#### Post date: [Juin 19, 2018, 5:00 UTC](https://meta.discourse.org/t/overview-single-sign-on-sso-oauth2-is-this-chart-correct/90231/1 "2018-06-19T17:00:11Z")

</div>

I’m slightly confused between SSO, OAuth2, etc. so I tried to create a simple chart to get a general understanding. Is this correct?

 ![login%20chart2](https://global.discourse-cdn.com/meta/original/3X/a/b/ab24538a95dfc354f306d9f8b891260b254c492c.png)

[I’m not a developer but I need to understand this to make some decisions - thanks!]

---

<div class="post-metadata">

### Author: ![supermathie](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/supermathie/32/507518_2.png) [@supermathie](https://meta.discourse.org/u/supermathie)
#### Post date: [Juin 19, 2018, 5:39 UTC](https://meta.discourse.org/t/overview-single-sign-on-sso-oauth2-is-this-chart-correct/90231/2 "2018-06-19T17:39:02Z")

</div>

Yes, that’s pretty much it.

For reference here are exemplar login sequences **without SSO** - note that Discourse has to understand how to interface with each possible backend:

 ![image](https://global.discourse-cdn.com/meta/original/3X/4/c/4c6f513ef8b58ae711c4ba3adc0f13c9ce0b68ef.png)

Here is an example **with SSO** - note that Discourse only communicates with a Single system - whatever happens behind that (username/password, oAuth2, fingerprints, RFID card, blood sample, retinal scanner) is of no concern to Discourse:

 ![image](https://global.discourse-cdn.com/meta/original/3X/d/2/d2ede3d811113496ed47af73bb9002f889809a3e.png)

---

<div class="post-metadata">

### Author: ![forumquestions](https://avatars.discourse-cdn.com/v4/letter/f/85e7bf/32.png) [@forumquestions](https://meta.discourse.org/u/forumquestions)
#### Post date: [Juin 19, 2018, 6:26 UTC](https://meta.discourse.org/t/overview-single-sign-on-sso-oauth2-is-this-chart-correct/90231/3 "2018-06-19T18:26:45Z")

</div>

Great, thank you, very helpful!

---

<div class="post-metadata">

### Author: ![forumquestions](https://avatars.discourse-cdn.com/v4/letter/f/85e7bf/32.png) [@forumquestions](https://meta.discourse.org/u/forumquestions)
#### Post date: [Juin 20, 2018, 8:00 UTC](https://meta.discourse.org/t/overview-single-sign-on-sso-oauth2-is-this-chart-correct/90231/4 "2018-06-20T08:00:41Z")

</div>

Another helpful discussion regarding SSO and the levels of spam protection, [linked here](https://meta.discourse.org/t/possible-to-use-sso-without-disabling-signup-and-registration-spam-checks/24415) for reference