# Password verification via REST API
**URL:** https://meta.discourse.org/t/password-verification-via-rest-api/51409
**Category:** SSO
**Created:** [2016年十月11日 15:19 UTC](https://meta.discourse.org/t/password-verification-via-rest-api/51409 "2016-10-11T15:19:45Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@windy](https://meta.discourse.org/u/windy)
#### Post date: [2016年十月11日 15:19 UTC](https://meta.discourse.org/t/password-verification-via-rest-api/51409/1 "2016-10-11T15:19:45Z")
Hello I have a question regarding the REST API. I currently have a web service that shares account information with our Discourse instance using SSO. Everything works gorgeously and the user is able to authenticate with my service via the instance.
However, I’ve reached the point where I need a user to enter their password for certain actions just for added security. I need a way to verify the password against discourse even if the user is signed in on Discourse. Is this currently possible?
---
### Author:  [@windy](https://meta.discourse.org/u/windy)
#### Post date: [2016年十月11日 21:18 UTC](https://meta.discourse.org/t/password-verification-via-rest-api/51409/2 "2016-10-11T21:18:13Z")
I suppose a way around this would be logging the user out with `/admin/users/:id/log_out` and then having them authenticate again with SSO but this is not ideal.