# SSO login & logout issues

**URL:** https://meta.discourse.org/t/sso-login-logout-issues/48351
**Category:** SSO
**Created:** [08.Август.2016 10:48:08 UTC](https://meta.discourse.org/t/sso-login-logout-issues/48351 "2016-08-08T10:48:08Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![junaid\_pk14](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/junaid_pk14/32/67840_2.png) [@junaid\_pk14](https://meta.discourse.org/u/junaid_pk14)
#### Post date: [08.Август.2016 10:48:08 UTC](https://meta.discourse.org/t/sso-login-logout-issues/48351/1 "2016-08-08T10:48:08Z")

</div>

Hello,

We have rails application that is working as SSO provider and our forum is SSO consumer. Using Discourse forum available option we have successfully implemented followig flow

Case a)  
1- User open forum site(www.new\_forum.com).  
2- User click on login button, user will be redirected to Rails Site(SSO provider), after verifying credentials rails site send user to forum site.  
3- User can create / reply Post. It is working fine.

How can be implement following flows in context of [Setup DiscourseConnect - Official Single-Sign-On for Discourse (sso)](https://meta.discourse.org/t/official-single-sign-on-for-discourse/13045)

Case b)  
1 - User login on our rails site.  
2 - we want to automatically login him on the forum too as if he will have to click ‘login’ button after landing on forum page following link from our website.  
3 - How can we implement this flow? I tried to sync sso using url (http://www.new\_forum.com:3000/admin/users/sync\_sso?sso=bm9uY2U9KysrKyZlbWFpbD1qdW5haWQubWFsaWslNDBjb25maXouY29tJmV4%0AdGVybmFsX2lkPTgyNTk5NA%3D%3D%0A&sig=f6a965124e7c172bd00825a50bb2ec653dd0443c858c9181e3cafec6691b4b08&api\_username=junaid.malik&api\_key=3ab5e2211dd548e4cda7daf13ca5edd643329d8f1e6498c0bcd1110e17152f1d) but its not working.

Case c)  
1 - User logout from Rails site then how can we logout the user from forum.  
2 - I tried url(http://www.new\_forum.com:3000/admin/users/junaid.malik/log\_out?sso=bm9uY2U9KysrKyZlbWFpbD1qdW5haWQubWFsaWslNDBjb25maXouY29tJmV4%0AdGVybmFsX2lkPTgyNTk5NA%3D%3D%0A&sig=f6a965124e7c172bd00825a50bb2ec653dd0443c858c9181e3cafec6691b4b08&api\_username=junaid.malik&api\_key=3ab5e2211dd548e4cda7daf13ca5edd643329d8f1e6498c0bcd1110e17152f1d) but its not working.

Regads,  
Junaid

---

<div class="post-metadata">

### Author: ![junaid\_pk14](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/junaid_pk14/32/67840_2.png) [@junaid\_pk14](https://meta.discourse.org/u/junaid_pk14)
#### Post date: [08.Август.2016 15:20:20 UTC](https://meta.discourse.org/t/sso-login-logout-issues/48351/2 "2016-08-08T15:20:20Z")

</div>

Hello,

I continued work on above issue “case b” regarding to login on SSO consumer(forum) from SSO provider(Rails app). I explored the forum and came across solution to use [GitHub - discourse/discourse\_api: Ruby API for Discourse · GitHub](https://github.com/discourse/discourse_api) gem to sync SSO record(From SSO provider to SSO consumer) and logout user from SSO Provider. I tried this by following code but it didn’t work because cookies which come in response are not added in response of request used to  
authenticate the user. Did anyone face such issue before?

```
client = DiscourseApi::Client.new("http://www.newforum.com:3000")
client.api_username = "junaid.malik"
client.api_key = "3ab5e2211dd548e4cda7daf13ca5edd643329d8f1e6498c0bcd1110e17152f1d"

user = User.find_by_email("junaid.malik@example.com") 
 
client.sync_sso(
  sso_secret: SSO_SECRET,
  name: user.name,
  username: user.username,
  email: user.email,
  external_id: user.id
)

```

Regards,  
Junaid

---

<div class="post-metadata">

### Author: ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [12.Август.2016 00:43:03 UTC](https://meta.discourse.org/t/sso-login-logout-issues/48351/3 "2016-08-12T00:43:03Z")

</div>

> [@junaid\_pk14](#):
>
> Case b)

When the user is logged in on your site, modify the link to the forum to end with `/session/sso`. When the user clicks this link to switch to the forum, this will trigger SSO login.

---

<div class="post-metadata">

### Author: ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)
#### Post date: [22.Февраль.2019 13:19:33 UTC](https://meta.discourse.org/t/sso-login-logout-issues/48351/4 "2019-02-22T13:19:33Z")

</div>



---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [25.Февраль.2019 04:06:36 UTC](https://meta.discourse.org/t/sso-login-logout-issues/48351/5 "2019-02-25T04:06:36Z")

</div>


