From b69c6f85c3441b14c65f8c82e61569b72b973bb6 Mon Sep 17 00:00:00 2001
From: tom27052006 <83423411+tom27052006@users.noreply.github.com>
Date: Thu, 29 Oct 2026 23:47:44 +0100
Subject: [PATCH] Hide the email field for SSO-only login when 2FA remember is
 disabled

---
 src/static/templates/scss/vaultwarden.scss.hbs | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/src/static/templates/scss/vaultwarden.scss.hbs b/src/static/templates/scss/vaultwarden.scss.hbs
index d062c026..3a570115 100644
--- a/src/static/templates/scss/vaultwarden.scss.hbs
+++ b/src/static/templates/scss/vaultwarden.scss.hbs
@@ -27,6 +27,19 @@ a[href$="/settings/sponsored-families"] {
 }
 {{/if}}
 
+{{#if sso_only}}
+{{#if remember_2fa_disabled}}
+/* The Web Vault uses this marker to allow SSO without a pre-entered email. */
+:root {
+  --vw-sso-email-optional: 1;
+}
+.vw-email-form-field,
+.vw-remember-email {
+  @extend %vw-hide;
+}
+{{/if}}
+{{/if}}
+
 /* Hide the default/continue `Email` input field */
 {{#if sso_enabled}}
 .vw-email-continue {