# Security implications of exposed SSO Secret in multi-user install?

**URL:** <https://meta.discourse.org/t/security-implications-of-exposed-sso-secret-in-multi-user-install/29092>\
**Category:** WordPress\
**Created:** [21 مايو 2015، 8:39م UTC](https://meta.discourse.org/t/security-implications-of-exposed-sso-secret-in-multi-user-install/29092 "2015-05-21T20:39:00Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![jetatomic](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jetatomic/32/42202_2.png) [@jetatomic](https://meta.discourse.org/u/jetatomic)\
**Post date:** [22 مايو 2015، 6:26م UTC](https://meta.discourse.org/t/security-implications-of-exposed-sso-secret-in-multi-user-install/29092/7 "2015-05-22T18:26:50Z")

</div>

Elusive obvious in the short term: SSO isn’t necessary for the sub-sites if all auth is routed through the main network site endpoint. So… drum roll… leave the _sso secret_ field blank in the sub-sites’ plugins settings. Problem solved.

Well I’m off to try to invent more ultra-complex solutions to non-existent problems. Oy.

---

_[View the full topic](https://meta.discourse.org/t/security-implications-of-exposed-sso-secret-in-multi-user-install/29092)._