# Check if user is authenticated from an external marketing website (webflow)

**URL:** <https://community.auth0.com/t/check-if-user-is-authenticated-from-an-external-marketing-website-webflow/194417>\
**Category:** Get Help\
**Tags:** authentication-sessions, sessions\
**Created:** [November 12, 2025, 5:49pm UTC](https://community.auth0.com/t/check-if-user-is-authenticated-from-an-external-marketing-website-webflow/194417 "2025-11-12T17:49:37Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ac831](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/ac831/32/71057_2.png) [@ac831](https://community.auth0.com/u/ac831)\
**Post date:** [November 12, 2025, 5:49pm UTC](https://community.auth0.com/t/check-if-user-is-authenticated-from-an-external-marketing-website-webflow/194417/1 "2025-11-12T17:49:37Z")

</div>

We use auth0 for login to our production saas app, located on app . example . com

We have a marketing website at example . com which was built on Webflow.

I’m wondering if there is any best practice or light front end JS SDK we can use to check whether the user is currently logged in, and get just a true/false binary answer? The reason for this is wanting to hide the “log in” link in our nav and instead show a link to “my account” etc.

Hoping someone can share a best practice for this - any way to do this besides manually tracking state in a cookie tied to top level domain?

---

<div class="post-metadata">

**Author:** ![nik.baleca](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/nik.baleca/32/68749_2.png) [@nik.baleca](https://community.auth0.com/u/nik.baleca)\
**Post date:** [November 14, 2025, 7:18pm UTC](https://community.auth0.com/t/check-if-user-is-authenticated-from-an-external-marketing-website-webflow/194417/3 "2025-11-14T19:18:58Z")

</div>

hi @ac831

Welcome to the Auth0 Community!

I would have two suggestions regarding this matter:

- Use `checkSession()` in a hidden iFrame pointing to your domain in order to check for an active SSO session. This might be an issue since it is basically checking for a third party cookie which might be blocked by the browser or other possible CORS policies. However, if you have a custom domain, set up, the root will be shared across the domains and the cookies will be considered first party.
- Set a non-sensitive cookie after the user logs in on the root domain. You will need to clear this cookie on logout. I would recommend this approach over the first one if you are not using a custom domain.

```auto
document.cookie = "isLoggedIn=true; domain=.example.com; path=/; Secure; SameSite=Lax";

//Once you have set this cookie, you can do a simple check like this:
<script>
  document.addEventListener("DOMContentLoaded", function() {
    
    const isLoggedIn = document.cookie.includes("is_logged_in=true");

//Add the required logic for your application here
  });
</script>

```

If you have any other questions, let me know!

Kind Regards,  
Nik

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [November 28, 2025, 7:19pm UTC](https://community.auth0.com/t/check-if-user-is-authenticated-from-an-external-marketing-website-webflow/194417/4 "2025-11-28T19:19:24Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.