# Use OAuth Plugin for Auth0 more seamlessly
**URL:** https://meta.discourse.org/t/use-oauth-plugin-for-auth0-more-seamlessly/235331
**Category:** SSO
**Created:** [August 6, 2022, 9:39pm UTC](https://meta.discourse.org/t/use-oauth-plugin-for-auth0-more-seamlessly/235331 "2022-08-06T21:39:45Z")
**Posts on this page:** 11
**Page:** 1
### Author:  [@tobi1](https://meta.discourse.org/u/tobi1)
#### Post date: [August 6, 2022, 9:39pm UTC](https://meta.discourse.org/t/use-oauth-plugin-for-auth0-more-seamlessly/235331/1 "2022-08-06T21:39:45Z")
I am currently trying to bring Auth0 authentication to my Discourse app. I essentially followed the workflow [here](https://meta.discourse.org/t/how-to-use-auth0-with-the-oauth2-basic-plugin/64633) and I get things running.
However, I am not quite happy with it for several reasons:
1. After clicking on sign in/up, there is only a button "with Auth0β. I want there Auth0 login/sign up panel the only thing that shows up after clicking sign in/up at the top of the Discourse page.
2. After authentication with Auth0, people should not have to create a new user, instead it should all be fine because of Auth0.
3. E-mail authentication should be or should have been handled via Auth0, not via Discourse.
4. If you already have logged in via Auth0 in that browser, possibly with the same app from Auth0, in another module of our platform, then you should be automatically logged in.
5. There should still be the possibility to login as the admin user, as this might turn out to be more challenging after implementing point no. 1.
Could you help me to setup everything or at least parts of it?
---
### Author:  [@blake](https://meta.discourse.org/u/blake)
#### Post date: [August 8, 2022, 9:09am UTC](https://meta.discourse.org/t/use-oauth-plugin-for-auth0-more-seamlessly/235331/2 "2022-08-08T09:09:27Z")
> [@tobi1](#):
>
> E-mail authentication should be or should have been handled via Auth0, not via Discourse.
I believe you can check this setting in discourse `auth_overrides_email` for this.
> [@tobi1](#):
>
> After authentication with Auth0, people should not have to create a new user, instead it should all be fine because of Auth0.
And you can use this sight setting for this: `auth_skip_create_confirm`
> When signing up via external auth, skip the create account popup. Best used alongside auth\_overrides\_email, auth\_overrides\_username and auth\_overrides\_name.
There is also the `auth_immediately` setting which might do what you are after as well:
> Automatically redirect to the external login system without user interaction. This only takes effect when login\_required is true, and there is only one external authentication method
> [@tobi1](#):
>
> There should still be the possibility to login as the admin user, as this might turn out to be more challenging after implementing point no. 1.
You can visit `/u/admin-login` to bypass oauth.
---
### Author:  [@tobi1](https://meta.discourse.org/u/tobi1)
#### Post date: [August 8, 2022, 2:40pm UTC](https://meta.discourse.org/t/use-oauth-plugin-for-auth0-more-seamlessly/235331/3 "2022-08-08T14:40:46Z")
Many thanks for your input, @blake π
Do you also have some input for the points 1 and 4 or are these more difficult?
---
### Author:  [@blake](https://meta.discourse.org/u/blake)
#### Post date: [August 8, 2022, 5:17pm UTC](https://meta.discourse.org/t/use-oauth-plugin-for-auth0-more-seamlessly/235331/4 "2022-08-08T17:17:18Z")
I think these settings `auth_immediatley` and `auth_skip_create_confirm` will address points 1 and 4. Can you enable them and see if it improves things?
---
### Author:  [@tobi1](https://meta.discourse.org/u/tobi1)
#### Post date: [August 10, 2022, 2:32pm UTC](https://meta.discourse.org/t/use-oauth-plugin-for-auth0-more-seamlessly/235331/5 "2022-08-10T14:32:30Z")
@blake Many thanks for your input.
I did everything as outlined in the setup page plus your suggestions. However, when I try to login this appears
Whereas at [https://community.auth0.com/](https://community.auth0.com/) this is what shows for trying to login (and is intended for my site as well)
Furthermore, I tried to login with my test e-mail and it still requires e-mail auth despite the e-mail is authenticated at Auth0
Do you know how to change it accordingly?
---
### Author:  [@MarkDoerr](https://meta.discourse.org/u/MarkDoerr)
#### Post date: [December 16, 2022, 6:45pm UTC](https://meta.discourse.org/t/use-oauth-plugin-for-auth0-more-seamlessly/235331/6 "2022-12-16T18:45:00Z")
Try disabling the `enable local logins` settings. This should remove the ability to login leaving your users only the option of logging in with OAuth2.
I would recommend doing this this in a separate browser session though. That way you can revert any changes you make if you have configuration problems without losing the ability to login.
---
### Author:  [@robertkibet](https://meta.discourse.org/u/robertkibet)
#### Post date: [January 20, 2023, 9:45am UTC](https://meta.discourse.org/t/use-oauth-plugin-for-auth0-more-seamlessly/235331/7 "2023-01-20T09:45:30Z")
Hello @blake
Thanks for the insights. I have made some progress but unfortunately there is still a slight problem with login. Whenever I hit the login button, correct information for the user is fetched from auth0, but discourse still tries to create an account.
I am taken to a _Welcome, lets create your account_ screen with an error that says **Primary email has already been taken** error.
This is my current config for all the overrides:
Kindly assist, thanks.
---
### Author:  [@leonardo](https://meta.discourse.org/u/leonardo)
#### Post date: [January 20, 2023, 1:22pm UTC](https://meta.discourse.org/t/use-oauth-plugin-for-auth0-more-seamlessly/235331/8 "2023-01-20T13:22:51Z")
Hi Robert!
You can fix this by enabling this setting: `oauth2 allow association change`
---
### Author:  [@robertkibet](https://meta.discourse.org/u/robertkibet)
#### Post date: [January 20, 2023, 1:49pm UTC](https://meta.discourse.org/t/use-oauth-plugin-for-auth0-more-seamlessly/235331/9 "2023-01-20T13:49:34Z")
Hello @leonardo unfortunately the issue still persists after enabling that setting.
---
### Author:  [@robertkibet](https://meta.discourse.org/u/robertkibet)
#### Post date: [January 20, 2023, 2:24pm UTC](https://meta.discourse.org/t/use-oauth-plugin-for-auth0-more-seamlessly/235331/10 "2023-01-20T14:24:30Z")
> [@blake](#):
>
> auth\_overrides\_email
somehow it is working well now. I added **oauth2** **email verified** rule and its now working. Interesting.
---
### Author:  [@gagegreg](https://meta.discourse.org/u/gagegreg)
#### Post date: [December 11, 2024, 9:48pm UTC](https://meta.discourse.org/t/use-oauth-plugin-for-auth0-more-seamlessly/235331/11 "2024-12-11T21:48:07Z")
Love this plugin. I notice when I sign out, it does sign me out out Discourse. But when I click sign in⦠it immediately signs me back in (without going to Auth0). I allowed the logout URI in my Auth0 App, but it looks like https://AUTH0\_DOMAIN/v2/logout never gets called from this plugin. Who maintains this? Can this be added?