From 4e41cb368b2566ba6469139a4366130e71fcefcd Mon Sep 17 00:00:00 2001
From: tom27052006 <83423411+tom27052006@users.noreply.github.com>
Date: Sat, 19 Sep 2026 19:26:19 +0200
Subject: [PATCH] Hide SSO email when 2FA remember is disabled

---
 src/static/templates/scss/vaultwarden.scss.hbs | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/src/static/templates/scss/vaultwarden.scss.hbs b/src/static/templates/scss/vaultwarden.scss.hbs
index 477cdd34..e09304ee 100644
--- a/src/static/templates/scss/vaultwarden.scss.hbs
+++ b/src/static/templates/scss/vaultwarden.scss.hbs
@@ -27,6 +27,19 @@ a[href$="/settings/sponsored-families"] {
 }
 {{/if}}
 
+{{#if sso_only}}
+{{#if remember_2fa_disabled}}
+/* The Web Vault uses this marker to allow SSO without a pre-entered email. */
+:root {
+  --vw-sso-email-optional: 1;
+}
+.vw-email-form-field,
+.vw-remember-email {
+  @extend %vw-hide;
+}
+{{/if}}
+{{/if}}
+
 /* Hide the default/continue `Email` input field */
 {{#if sso_enabled}}
 .vw-email-continue {