# SSO between two Discourse instances
**URL:** https://meta.discourse.org/t/sso-between-two-discourse-instances/160508
**Category:** Support
**Created:** [August 11, 2020, 5:28pm UTC](https://meta.discourse.org/t/sso-between-two-discourse-instances/160508 "2020-08-11T17:28:09Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@LSD2020](https://meta.discourse.org/u/LSD2020)
#### Post date: [August 11, 2020, 5:28pm UTC](https://meta.discourse.org/t/sso-between-two-discourse-instances/160508/1 "2020-08-11T17:28:09Z")
I have two instances of Discourse. One will be gaining traffic early and another will be setup as a more general instance that will mature better. I’d like early members who join the first instance to not be hassled with signing up again for the second, longer-lasting instance.
Is this general guide still the way to go?
> [@Use Discourse as an identity provider (SSO, DiscourseConnect)](https://meta.discourse.org/t/using-discourse-as-a-sso-provider/32974):
>
> So you want to use Discourse as an identity provider for your own web app? Great! Let’s get started. Enable [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true) provider setting Under Discourse admin site settings (/admin/site\_settings) enable setting enable discourse connect provider and add a secret string to discourse connect provider secrets (used to hash SSO payloads). Implement [DiscourseConnect](https://meta.discourse.org/t/13045?silent=true) in your web app: Generate a random [nonce](https://en.wikipedia.org/wiki/Cryptographic_nonce). Let’s call this value NONCE. Save it temporarily so that you can verify it with the …
Any gotchas using this guide for SSO between two Discourse instances?
I don’t know it makes much of a difference, but the setup is both instances are running on the same server in standalone configuration with reverse proxy and SSL provisioning standing in front of the containers.
Another thought. Would it make more sense to use a 3rd party SSO provider for both instances? That way the longer lasting forum wouldn’t depend on the short-term instance. It could be brought down without issues on the second.
---
### Author:  [@LSD2020](https://meta.discourse.org/u/LSD2020)
#### Post date: [August 11, 2020, 6:33pm UTC](https://meta.discourse.org/t/sso-between-two-discourse-instances/160508/2 "2020-08-11T18:33:40Z")
I decided on OAuth social logins for both. It was painless enough and offers the most flexibility
---
### Author:  [@system](https://meta.discourse.org/u/system)
#### Post date: [September 10, 2020, 6:33pm UTC](https://meta.discourse.org/t/sso-between-two-discourse-instances/160508/3 "2020-09-10T18:33:44Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.