Thanks for the advice, Chandler. I'll see if Knack can turn Advanced SSO back on and try your suggestion.
Kind regards
Chris