# Users are losing Admin role due to SSO
**URL:** https://meta.discourse.org/t/users-are-losing-admin-role-due-to-sso/75345
**Category:** Support
**Created:** [12월 4, 2017, 1:34오후 UTC](https://meta.discourse.org/t/users-are-losing-admin-role-due-to-sso/75345 "2017-12-04T13:34:04Z")
**Posts on this page:** 9
**Page:** 1
### Author:  [@christian.krammer](https://meta.discourse.org/u/christian.krammer)
#### Post date: [12월 4, 2017, 1:34오후 UTC](https://meta.discourse.org/t/users-are-losing-admin-role-due-to-sso/75345/1 "2017-12-04T13:34:04Z")
We have the problem in our self-hosted forum at [https://discuss.gravit.io/](https://discuss.gravit.io/) that I and a colleague are always losing the Admin role. Somebody assigns it to me, I assign it to a colleague, and after a while, both of us aren’t Admins anymore.
Anything we can do? Any information I can give you?
---
### Author:  [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [12월 4, 2017, 2:33오후 UTC](https://meta.discourse.org/t/users-are-losing-admin-role-due-to-sso/75345/2 "2017-12-04T14:33:22Z")
Are there any other admins in your instance? Do you see anything related in Admin → Logs → Staff Actions?
---
### Author:  [@christian.krammer](https://meta.discourse.org/u/christian.krammer)
#### Post date: [12월 4, 2017, 2:53오후 UTC](https://meta.discourse.org/t/users-are-losing-admin-role-due-to-sso/75345/3 "2017-12-04T14:53:37Z")
Yes, we have three Admins in total. One of them seems to keep his Admin status, but the remaining two seem to lose it regularely.
Had a look at the logs, but nothing points to admins, just the "grant admin"s, where we assigned the Admin role amongst each other. I can share the log with you if you like.
---
### Author:  [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [12월 4, 2017, 3:21오후 UTC](https://meta.discourse.org/t/users-are-losing-admin-role-due-to-sso/75345/4 "2017-12-04T15:21:50Z")
You use SSO, so if the SSO payload has `admin=false` admin will be removed on next login.
---
### Author:  [@christian.krammer](https://meta.discourse.org/u/christian.krammer)
#### Post date: [12월 4, 2017, 3:40오후 UTC](https://meta.discourse.org/t/users-are-losing-admin-role-due-to-sso/75345/5 "2017-12-04T15:40:57Z")
That sounds reasonable. Where can I change that?
---
### Author:  [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [12월 4, 2017, 9:33오후 UTC](https://meta.discourse.org/t/users-are-losing-admin-role-due-to-sso/75345/6 "2017-12-04T21:33:50Z")
> [@christian.krammer](#):
>
> Where can I change that?
If you want to manage admin powers in Discourse only, change the application that lives on [https://cloud.gravit.io/sso](https://cloud.gravit.io/sso) to stop sending the admin attribute.
---
### Author:  [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [12월 5, 2017, 4:34오전 UTC](https://meta.discourse.org/t/users-are-losing-admin-role-due-to-sso/75345/7 "2017-12-05T04:34:25Z")
To check if `admin=false` is being sent in the SSO payload, enable `verbose SSO logging` via settings and check your logs at `https://discuss.gravit.io/logs`. It’s highly likely this is the issue, we’ve seen it on multiple sites in the past.
---
### Author:  [@system](https://meta.discourse.org/u/system)
#### Post date: [2월 5, 2020, 12:42오후 UTC](https://meta.discourse.org/t/users-are-losing-admin-role-due-to-sso/75345/8 "2020-02-05T12:42:33Z")
---
### Author:  [@system](https://meta.discourse.org/u/system)
#### Post date: [3월 6, 2020, 12:55오후 UTC](https://meta.discourse.org/t/users-are-losing-admin-role-due-to-sso/75345/9 "2020-03-06T12:55:53Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.