# Using Discourse as SSO - control logout?
**URL:** https://meta.discourse.org/t/using-discourse-as-sso-control-logout/89209
**Category:** Support
**Created:** [June 5, 2018, 8:38pm UTC](https://meta.discourse.org/t/using-discourse-as-sso-control-logout/89209 "2018-06-05T20:38:16Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@Vaping\_Community](https://meta.discourse.org/u/Vaping_Community)
#### Post date: [June 5, 2018, 8:38pm UTC](https://meta.discourse.org/t/using-discourse-as-sso-control-logout/89209/1 "2018-06-05T20:38:16Z")
I’m using Discourse as SSO for my subdomain site but I get logged out every hour??
How can I take control of this, is it a session, cookie, timer?
Searched a lot but couldn’t find any mention of how this works
Thanks in advance.
Edit: I am using the PHP script.
---
### Author:  [@vinothkannans](https://meta.discourse.org/u/vinothkannans)
#### Post date: [June 6, 2018, 5:35am UTC](https://meta.discourse.org/t/using-discourse-as-sso-control-logout/89209/2 "2018-06-06T05:35:19Z")
What is your `maximum session age` site setting value? By default it’s 1440 hours.
---
### Author:  [@Vaping\_Community](https://meta.discourse.org/u/Vaping_Community)
#### Post date: [June 6, 2018, 8:34am UTC](https://meta.discourse.org/t/using-discourse-as-sso-control-logout/89209/3 "2018-06-06T08:34:13Z")
Mine is set to 1440, when I get “logged out” I just see a white screen, I’ll do some checks today but I’m not setting my own cookies only sessions to verify `loggged_in` in my app and those shouldn’t expire until browser closed.
How it works currently (using the PHP script).
User clicks login button - PHP script does its thing - you login at discourse - if that is successful - set the sessions.
Maybe there is a better way to do it, I’m not sure.
---
### Author:  [@vinothkannans](https://meta.discourse.org/u/vinothkannans)
#### Post date: [June 6, 2018, 10:25am UTC](https://meta.discourse.org/t/using-discourse-as-sso-control-logout/89209/4 "2018-06-06T10:25:54Z")
So you are using Discourse as SSO provider and you having issue in your php application. In that case there is nothing you can do from Discourse side. You have to check your PHP session configuration. Discourse part of the SSO is verifying the user login and sending the response only. Your application should handle the rest.
---
### Author:  [@Vaping\_Community](https://meta.discourse.org/u/Vaping_Community)
#### Post date: [June 6, 2018, 10:30am UTC](https://meta.discourse.org/t/using-discourse-as-sso-control-logout/89209/5 "2018-06-06T10:30:33Z")
Ok, which it is, I’ll need to check what I’m doing wrong, thanks for your quick response and help
On a side note:
`[avatar_url]`
Is still returning an extra `/uploads/default/` in the Avatar URL
```plaintext
/uploads/default//uploads/default/original/2X/9/
```
---
### Author:  [@vinothkannans](https://meta.discourse.org/u/vinothkannans)
#### Post date: [June 6, 2018, 1:00pm UTC](https://meta.discourse.org/t/using-discourse-as-sso-control-logout/89209/6 "2018-06-06T13:00:49Z")
It is fixed as per commit
[https://github.com/discourse/discourse/commit/d8e641cd98e7550561d561a72065d2ee842dde3b](https://github.com/discourse/discourse/commit/d8e641cd98e7550561d561a72065d2ee842dde3b)
---
### Author:  [@Vaping\_Community](https://meta.discourse.org/u/Vaping_Community)
#### Post date: [June 6, 2018, 1:01pm UTC](https://meta.discourse.org/t/using-discourse-as-sso-control-logout/89209/7 "2018-06-06T13:01:11Z")
Incredible, thanks for your help
---
### Author:  [@vinothkannans](https://meta.discourse.org/u/vinothkannans)
#### Post date: [June 6, 2018, 1:01pm UTC](https://meta.discourse.org/t/using-discourse-as-sso-control-logout/89209/8 "2018-06-06T13:01:34Z")