# SSO errors - some emails receive "Validation failed: Primary email is not allowed."
**URL:** https://meta.discourse.org/t/sso-errors-some-emails-receive-validation-failed-primary-email-is-not-allowed/144484
**Category:** SSO
**Created:** [March 16, 2020, 3:41pm UTC](https://meta.discourse.org/t/sso-errors-some-emails-receive-validation-failed-primary-email-is-not-allowed/144484 "2020-03-16T15:41:44Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@bvdrie72](https://meta.discourse.org/u/bvdrie72)
#### Post date: [March 16, 2020, 3:41pm UTC](https://meta.discourse.org/t/sso-errors-some-emails-receive-validation-failed-primary-email-is-not-allowed/144484/1 "2020-03-16T15:41:44Z")
We recently moved all users to SSO via our primary site. Out of 50k+ users, all but 9 seem to work fine.
The 9 remaining emails get this error:
Validation failed: Primary email is not allowed.
The email addresses do not exist in discourse and they are valid emails
We are running 2.3.9
Any reason to believe these will suddenly work in 2.4 or 2.5?
---
### Author:  [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [March 16, 2020, 5:13pm UTC](https://meta.discourse.org/t/sso-errors-some-emails-receive-validation-failed-primary-email-is-not-allowed/144484/2 "2020-03-16T17:13:31Z")
> [@bvdrie72](#):
>
> The email addresses do not exist in discourse and they are valid emails
Is there anything common to the email addresses? Their length? Any symbols? Unicode characters?
If we can identify why they’re being rejected it should be possible to answer whether the rejection criteria in 2.3.9 has changed since.
---
### Author:  [@bvdrie72](https://meta.discourse.org/u/bvdrie72)
#### Post date: [March 20, 2020, 7:01pm UTC](https://meta.discourse.org/t/sso-errors-some-emails-receive-validation-failed-primary-email-is-not-allowed/144484/3 "2020-03-20T19:01:41Z")
Sorry, I had notifications turned off for some reason.
There is nothing consistent or unique about the email addresses.
- Mostly gmail accounts
- no funky characters (alpha\_numeric) only
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [March 20, 2020, 7:05pm UTC](https://meta.discourse.org/t/sso-errors-some-emails-receive-validation-failed-primary-email-is-not-allowed/144484/4 "2020-03-20T19:05:53Z")
Check your blocked emails in Admin, Logs, Screened Emails. And remember emails that are too close to the blocked emails (such as `superdave` versus `superdave1`) will also be blocked.
---
### Author:  [@bvdrie72](https://meta.discourse.org/u/bvdrie72)
#### Post date: [March 20, 2020, 7:39pm UTC](https://meta.discourse.org/t/sso-errors-some-emails-receive-validation-failed-primary-email-is-not-allowed/144484/5 "2020-03-20T19:39:07Z")
I don’t think I would have ever found it but they were in the screened emails list.
I approved them and now it works great.
---
### Author:  [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [March 10, 2023, 5:34am UTC](https://meta.discourse.org/t/sso-errors-some-emails-receive-validation-failed-primary-email-is-not-allowed/144484/8 "2023-03-10T05:34:02Z")