Overview
When performing the first login with a passwordless email connection, the connection=email query parameter must be specified according to the Authentication API docs Get Code or Link.
When initiating the second login using the same configuration, with the connection=email being passed, the Single Sign On (SSO) connection breaks.
Applies To
- Passwordless Single Sign On (SSO)
- Email Connections
Solution
When making the second /authorize request, the connection=email query param must be avoided in order not to break the SSO session. Simply not passing it is enough.