# 8.1.17 SSO login no longer working **URL:** \ **Category:** Ignition\ **Tags:** vision\ **Created:** [May 13, 2022, 2:17pm UTC](https://forum.inductiveautomation.com/t/8-1-17-sso-login-no-longer-working/59544 "2022-05-13T14:17:34Z")\ **Posts on this page:** 12\ **Page:** 1
**Author:** ![Rusty](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/rusty/32/19859_2.png) [@Rusty](https://forum.inductiveautomation.com/u/Rusty)\ **Post date:** [May 13, 2022, 2:17pm UTC](https://forum.inductiveautomation.com/t/8-1-17-sso-login-no-longer-working/59544/1 "2022-05-13T14:17:34Z")
Hello, We upgraded from 8.1.14 to 8.1.17 today. The first thing I noticed is that users are no longer automatically logged into Vision projects via SSO. The credentials still work when entered manually, so the AD connection is still working. Enable SSO login is still checked in the projects. Is there something that can be done to resolve this? Thanks, ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/6/f/6f40dd606c69da742238f3257ca8942a4add6bc4.png) ---
**Author:** ![Rusty](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/rusty/32/19859_2.png) [@Rusty](https://forum.inductiveautomation.com/u/Rusty)\ **Post date:** [May 13, 2022, 4:01pm UTC](https://forum.inductiveautomation.com/t/8-1-17-sso-login-no-longer-working/59544/2 "2022-05-13T16:01:57Z")
Here is the response I got from the Ignition team: > SSO for AD user sources has been forcefully disabled as of 8.1.17 due to a security vulnerability. Unfortunately for now, it is much better to have SSO disabled until a permanent fix is released in a later version (TBD). ---
**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\ **Post date:** [May 13, 2022, 4:32pm UTC](https://forum.inductiveautomation.com/t/8-1-17-sso-login-no-longer-working/59544/3 "2022-05-13T16:32:07Z")
(Some) more details here: > **[Ignition 8.1.17: Important Security Update, Tag Editor UX/UI Improvements,...](https://inductiveautomation.com/blog/ignition-8117-important-security-update-tag-editor-uxui-improvements-and-so-much-more)** > > As promised, Ignition 8.1.17 is now arriving at the station, bringing with it several major updates and improvements that you surely do not want to miss. In the blog post for our last release, 8.1.16, we dropped hints regarding several major... We’ll have a longer form blog post explaining things in depth up soon. ---
**Author:** ![bschroeder](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bschroeder/32/13260_2.png) [@bschroeder](https://forum.inductiveautomation.com/u/bschroeder)\ **Post date:** [May 18, 2022, 12:37pm UTC](https://forum.inductiveautomation.com/t/8-1-17-sso-login-no-longer-working/59544/4 "2022-05-18T12:37:10Z")
@paul-griffith I’m reading the post at [https://support.inductiveautomation.com/hc/en-us/articles/5979279808397-Active-Directory-SSO-Disabled-for-8-1-17-7-9-20-](https://support.inductiveautomation.com/hc/en-us/articles/5979279808397-Active-Directory-SSO-Disabled-for-8-1-17-7-9-20-) Do you know if this is a temporary situation, or one that is more long term? That way we can let our customers know that might be interested in upgrading… ie upgrade to 8.1.17 or wait for another version or two for this to be corrected. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [May 18, 2022, 12:38pm UTC](https://forum.inductiveautomation.com/t/8-1-17-sso-login-no-longer-working/59544/5 "2022-05-18T12:38:15Z")
This will not be a quick fix, and it’s a serious security issue, so I’d get them used to the idea it’s gone. ---
**Author:** ![bschroeder](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bschroeder/32/13260_2.png) [@bschroeder](https://forum.inductiveautomation.com/u/bschroeder)\ **Post date:** [May 18, 2022, 12:39pm UTC](https://forum.inductiveautomation.com/t/8-1-17-sso-login-no-longer-working/59544/6 "2022-05-18T12:39:38Z")
That’s the way I read it… we have one customer that uses this extensively, so I’ll let them know that you can re-enable, it’s just insecure. For their part though… they are pretty isolated from forward facing systems so about the only attack surface they have is in plant. And if you are there you already can make a mess. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [May 18, 2022, 12:41pm UTC](https://forum.inductiveautomation.com/t/8-1-17-sso-login-no-longer-working/59544/7 "2022-05-18T12:41:56Z")
Also, in case it’s not clear, _SSO_ still works, as in - you can still sign in using your AD credentials - but _automatic_ sign in is disabled. You will have to have to put in your username / password. ---
**Author:** ![bschroeder](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/bschroeder/32/13260_2.png) [@bschroeder](https://forum.inductiveautomation.com/u/bschroeder)\ **Post date:** [May 18, 2022, 12:47pm UTC](https://forum.inductiveautomation.com/t/8-1-17-sso-login-no-longer-working/59544/8 "2022-05-18T12:47:34Z")
Yeah… that’s the part they like. They want the operator to just sign onto the PC and then launch Vision and it automagically works. Unfortunately it’s one of those things that will break the operators brain if it changes. 😃 ---
**Author:** ![Urvish\_Mehta](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/urvish_mehta/32/81912_2.png) [@Urvish\_Mehta](https://forum.inductiveautomation.com/u/Urvish_Mehta)\ **Post date:** [April 4, 2023, 8:52pm UTC](https://forum.inductiveautomation.com/t/8-1-17-sso-login-no-longer-working/59544/9 "2023-04-04T20:52:49Z")
I see its almost a year to this response. Any idea how other customers are achieving this functionality? I want to setup autologins for each clients with different login creds. ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [April 4, 2023, 8:59pm UTC](https://forum.inductiveautomation.com/t/8-1-17-sso-login-no-longer-working/59544/10 "2023-04-04T20:59:13Z")
I suspect anybody who still has automatic sign in working, and isn't running an old version, has opted back into the insecure implementation using the system property mentioned in that KB article. Kerberos-based AD SSO support is still an incubation/research task in a backlog. There is no estimated date for this functionality. ---
**Author:** ![Herman\_Lundberg](https://avatars.discourse-cdn.com/v4/letter/h/df705f/32.png) [@Herman\_Lundberg](https://forum.inductiveautomation.com/u/Herman_Lundberg)\ **Post date:** [May 8, 2025, 9:00am UTC](https://forum.inductiveautomation.com/t/8-1-17-sso-login-no-longer-working/59544/11 "2025-05-08T09:00:30Z")
Any news on this? ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [May 8, 2025, 1:35pm UTC](https://forum.inductiveautomation.com/t/8-1-17-sso-login-no-longer-working/59544/12 "2025-05-08T13:35:55Z")
No change. I don't know where this sits in terms of priority.