# SSO does not go smoothly

**URL:** <https://community.auth0.com/t/sso-does-not-go-smoothly/23949>\
**Category:** Get Help\
**Tags:** sso\
**Created:** [April 15, 2019, 10:28am UTC](https://community.auth0.com/t/sso-does-not-go-smoothly/23949 "2019-04-15T10:28:10Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![mgdskr](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/mgdskr/32/14766_2.png) [@mgdskr](https://community.auth0.com/u/mgdskr)\
**Post date:** [April 15, 2019, 10:28am UTC](https://community.auth0.com/t/sso-does-not-go-smoothly/23949/1 "2019-04-15T10:28:10Z")

</div>

Hi!  
I have two applications `myapp.mydomain.com` and `myapp2.mydomain.com` with universal login. When user log in to myapp and then click on link to myapp2 - universal login appears. This time without password field - just `last time you log in with email`. So user have to click the email field. I thought there should not be this universal login form at all while switching between apps. The form appears only once but it is still annoying. Each app calls `authorize()` and store token in localstorage. Is there a way to get rid of the universal login form while switching the app.

---

<div class="post-metadata">

**Author:** ![jmangelo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jmangelo/32/7923_2.png) [@jmangelo](https://community.auth0.com/u/jmangelo)\
**Post date:** [April 15, 2019, 10:37am UTC](https://community.auth0.com/t/sso-does-not-go-smoothly/23949/3 "2019-04-15T10:37:43Z")

</div>

Based on your description, in particular, the fact that you get a _last time you…_ option, the most likely explanation is that your tenant does not have enabled seamless SSO which would mean an immediate redirection.

Go to the [Tenant Settings](https://manage.auth0.com/#/tenant) page in the [Auth0 Dashboard](https://manage.auth0.com/), and click the [**Advanced**](https://manage.auth0.com/#/tenant/advanced) tab. After Scroll to the **Log In Session Management** section, locate **Enable Seamless SSO** , and enable the toggle.

You may not see the toggle I mention above which in that case it means you do not have a legacy tenant and as such the option is enabled by default. In that case we may need to troubleshoot the situation further, but the first step would be to check if you have the toggle and if it is enabled.

---

<div class="post-metadata">

**Author:** ![mgdskr](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/mgdskr/32/14766_2.png) [@mgdskr](https://community.auth0.com/u/mgdskr)\
**Post date:** [April 15, 2019, 10:42am UTC](https://community.auth0.com/t/sso-does-not-go-smoothly/23949/4 "2019-04-15T10:42:18Z")

</div>

I don’t have that SSO toggle, but I see in config the line “sso\_disabled”: false, and suppose that it SSO was enabled by default.  
By the way, SSO works on localhost when apps are running on different ports localhost:3100 and localhost:3300.

---

<div class="post-metadata">

**Author:** ![jmangelo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jmangelo/32/7923_2.png) [@jmangelo](https://community.auth0.com/u/jmangelo)\
**Post date:** [April 15, 2019, 11:39am UTC](https://community.auth0.com/t/sso-does-not-go-smoothly/23949/5 "2019-04-15T11:39:30Z")

</div>

Can you share an HTTP trace that includes all requests since visiting the first application until you get the unexpected _last time you…_ option in the second applications?

Be sure to redact any sensitive information like passwords and session cookies.

---

<div class="post-metadata">

**Author:** ![mgdskr](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/mgdskr/32/14766_2.png) [@mgdskr](https://community.auth0.com/u/mgdskr)\
**Post date:** [April 15, 2019, 12:59pm UTC](https://community.auth0.com/t/sso-does-not-go-smoothly/23949/6 "2019-04-15T12:59:33Z")

</div>

Here is stack trace for auth0 request [https://gist.github.com/mgdskr/05587e05aca451f505fb5e76973c1466](https://gist.github.com/mgdskr/05587e05aca451f505fb5e76973c1466) and this one is the stack for all requests [https://gist.github.com/mgdskr/08581b82e03b88bb45ae86bb5bcad3c2](https://gist.github.com/mgdskr/08581b82e03b88bb45ae86bb5bcad3c2)

---

<div class="post-metadata">

**Author:** ![jmangelo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jmangelo/32/7923_2.png) [@jmangelo](https://community.auth0.com/u/jmangelo)\
**Post date:** [April 16, 2019, 10:28am UTC](https://community.auth0.com/t/sso-does-not-go-smoothly/23949/7 "2019-04-16T10:28:44Z")

</div>

From the sequence of request I only see one request to `/authorize` when I would expect two (one for each app), however, from the client identifier included I can see that the associated tenant does **not have** the SSO tenant setting enabled.

Can you check again in the tenant advanced settings; you should be seeing the toggle I mentioned before. If possible share a screenshot of what you see in the advanced settings for the session management part.

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [September 2, 2019, 12:00pm UTC](https://community.auth0.com/t/sso-does-not-go-smoothly/23949/8 "2019-09-02T12:00:00Z")

</div>


