# Active Directory User Authentication Failing

**URL:** <https://forum.inductiveautomation.com/t/active-directory-user-authentication-failing/106345>\
**Category:** Ignition\
**Tags:** ignition81\
**Created:** [May 16, 2025, 6:59pm UTC](https://forum.inductiveautomation.com/t/active-directory-user-authentication-failing/106345 "2025-05-16T18:59:12Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![josh.m](https://avatars.discourse-cdn.com/v4/letter/j/ee7513/32.png) [@josh.m](https://forum.inductiveautomation.com/u/josh.m)\
**Post date:** [May 16, 2025, 6:59pm UTC](https://forum.inductiveautomation.com/t/active-directory-user-authentication-failing/106345/1 "2025-05-16T18:59:12Z")

</div>

I've got a user who has been struggling to get authenticated into Ignition.

We authenticate through AD & when they try to log on, this is what I see in the log files.

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/e/d/ed200d974e86ac6ac003d8fafa85ad1ffd36dd2f.png)

**Observations:**

- Other users do not have issues logging on.
- I have seen the user log on to other systems that use the same AD creds without an issue.
- The account isn't locked in AD.
- We have verified the users account is in fact assigned to the right AD groups (which is probably irrelevant anyhow, given the error message we're getting)
- I've tried disabling account locking in Ignition temporarily as well just for good measure without any change.
- User could previously log on but can no longer do so.
- User has had a semi-recent password change but it's unclear if they were able to log on after it.

I'm not sure what I could try from the Ignition side, or how it might be causing AD to return an authentication error, but is there any chance this issue could stem from the Ignition side?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [May 16, 2025, 7:05pm UTC](https://forum.inductiveautomation.com/t/active-directory-user-authentication-failing/106345/2 "2025-05-16T19:05:10Z")

</div>

LDAP error code 49 is `LDAP_INVALID_CREDENTIALS`.

data `52e` is `ERROR_LOGON_FAILURE` (The user name or password is incorrect).

I suppose it's always possible there's some problem on the Ignition side, but it's not the obvious answer here.

---

<div class="post-metadata">

**Author:** ![josh.m](https://avatars.discourse-cdn.com/v4/letter/j/ee7513/32.png) [@josh.m](https://forum.inductiveautomation.com/u/josh.m)\
**Post date:** [May 16, 2025, 7:08pm UTC](https://forum.inductiveautomation.com/t/active-directory-user-authentication-failing/106345/3 "2025-05-16T19:08:24Z")

</div>

I would agree generally.

When I sat there & watched him log on to a different system though with no issue, using the same Active Directory credentials & then failing when he tried through Ignition.... I just don't know.

We've been at this for a few weeks now. I can't hardly fathom he's really still typing his creds in wrong every time... but on the other hand, I'm also aware of what the error message states so I don't have a leg to stand on here 😄

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [May 16, 2025, 7:11pm UTC](https://forum.inductiveautomation.com/t/active-directory-user-authentication-failing/106345/4 "2025-05-16T19:11:53Z")

</div>

Yeah he's probably not typing them in wrong, but there's probably some AD weirdness going on. Cache somewhere, a restart needed somewhere, not sure...

---

<div class="post-metadata">

**Author:** ![josh.m](https://avatars.discourse-cdn.com/v4/letter/j/ee7513/32.png) [@josh.m](https://forum.inductiveautomation.com/u/josh.m)\
**Post date:** [May 16, 2025, 7:18pm UTC](https://forum.inductiveautomation.com/t/active-directory-user-authentication-failing/106345/5 "2025-05-16T19:18:47Z")

</div>

Fair enough, caching had crossed my mind as well.

We've requested him to do a password reset. Maybe that'll sync things back up & resolve this. If not, I'm kind of baffled.

Appreciate it!

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [May 16, 2025, 7:23pm UTC](https://forum.inductiveautomation.com/t/active-directory-user-authentication-failing/106345/6 "2025-05-16T19:23:51Z")

</div>

If not, try support. They've probably seen more weird real world issues than I have.

---

<div class="post-metadata">

**Author:** ![josh.m](https://avatars.discourse-cdn.com/v4/letter/j/ee7513/32.png) [@josh.m](https://forum.inductiveautomation.com/u/josh.m)\
**Post date:** [May 16, 2025, 7:31pm UTC](https://forum.inductiveautomation.com/t/active-directory-user-authentication-failing/106345/7 "2025-05-16T19:31:37Z")

</div>

Sounds good, will do. Thanks again!

---

<div class="post-metadata">

**Author:** ![josh.m](https://avatars.discourse-cdn.com/v4/letter/j/ee7513/32.png) [@josh.m](https://forum.inductiveautomation.com/u/josh.m)\
**Post date:** [May 16, 2025, 7:43pm UTC](https://forum.inductiveautomation.com/t/active-directory-user-authentication-failing/106345/8 "2025-05-16T19:43:25Z")

</div>

Not sure what the issue causing it was ultimately, but seems a password reset of the account resolved it. Maybe something cached or out of sync somehow... but seems back in order with the reset. Thanks again & have a nice weekend.
