# AD\_DB\_Hybrid Authenticates Successfully, but Login Fails for Manual and SSO Login

**URL:** <https://forum.inductiveautomation.com/t/ad-db-hybrid-authenticates-successfully-but-login-fails-for-manual-and-sso-login/21978>\
**Category:** Ignition\
**Tags:** security\
**Created:** [January 18, 2019, 5:00pm UTC](https://forum.inductiveautomation.com/t/ad-db-hybrid-authenticates-successfully-but-login-fails-for-manual-and-sso-login/21978 "2019-01-18T17:00:51Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![robert.mosher](https://avatars.discourse-cdn.com/v4/letter/r/7cd45c/32.png) [@robert.mosher](https://forum.inductiveautomation.com/u/robert.mosher)\
**Post date:** [January 18, 2019, 5:00pm UTC](https://forum.inductiveautomation.com/t/ad-db-hybrid-authenticates-successfully-but-login-fails-for-manual-and-sso-login/21978/1 "2019-01-18T17:00:51Z")

</div>

I am using an AD/Database Hybrid user source for the project and according to the logs, the AD authentication and user roles queries are successful, but the client will not log in. Both methods of logging in are failing: manually typing in a username/password, and SSO.

The result is the same when using the user source authentication test on the gateway webpage.

I know AD is set up correctly because I am using an AD/Internal user source to log into the designer with SSO.

 ![log-looks-successful](https://us1.discourse-cdn.com/inductiveautomation/original/2X/c/cb70eca0c9c3fa2be318a8e4be7b9ab6b57bac2a.png)

Here is the output of the Java Console:

```auto
Java Web Start 11.191.2.12 amd64
Using JRE version 1.8.0_191-b12 Java HotSpot(TM) 64-Bit Server VM
User home directory = C:\Users\robert.mosher
----------------------------------------------------
c: clear console window
f: finalize objects on finalization queue
g: garbage collect
h: display this help message
m: print memory usage
o: trigger logging
p: reload proxy configuration
q: hide console
r: reload policy configuration
s: dump system and deployment properties
t: dump thread list
v: dump thread stack
0-5: set trace level to <n>
----------------------------------------------------
Starting Bootstrap Loader v3.0
Connect Step [attempt 1] connecting to: http://192.168.2.40:8088/main...
Downloading manifest at http://192.168.2.40:8088/main/system/launchmf/C?os=windows&arch=x64
...connect successful
Successfully downloaded launch manifest:
<?xml version="1.0" encoding="UTF-8"?>
<launch scope="C">
	<module name="" build="2018112821">
		<jar name="java-cup-10k.jar" crc="AB682326" length="32451"/>
		<jar name="commons-digester-1.8.1.jar" crc="20778438" length="42546"/>
		<jar name="miglayout-core-4.2.jar" crc="EC3CFA11" length="29128"/>
		<jar name="jide-components-3.7.2.jar" crc="51C571C7" length="104434"/>
		<jar name="jide-plaf-3.7.2.jar" crc="5935398E" length="34343"/>
		<jar name="common-7.9.10.jar" crc="B58BD9CB" length="904156"/>
		<jar name="commons-logging-1.2.jar" crc="DB4B9A00" length="27460"/>
		<jar name="commons-beanutils-1.8.3.jar" crc="86B560C6" length="61028"/>
		<jar name="client-api-7.9.10.jar" crc="938DD878" length="901034"/>
		<jar name="metrics-core-3.1.0.jar" crc="E8CF1893" length="26710"/>
		<jar name="bcprov-jdk16-unsign-1.46.jar" crc="9AB21461" length="417043"/>
		<jar name="commons-lang3-3.3.2.jar" crc="E7839394" length="137157"/>
		<jar name="commons-collections-3.2.1.jar" crc="CFFAC520" length="114030"/>
		<jar name="jul-to-slf4j-1.7.21.jar" crc="503F83A" length="2381"/>
		<jar name="core-java6-3.2.1.4.jar" crc="E8500B4B" length="172935"/>
		<jar name="jfreechart-min-1.0.0.jar" crc="B0BAA748" length="419001"/>
		<jar name="commons-io-2.1.jar" crc="37C74DE0" length="51509"/>
		<jar name="miglayout-swing-4.2.jar" crc="6D970370" length="6570"/>
		<jar name="commons-cli-1.0.jar" crc="32913666" length="10867"/>
		<jar name="barcode4j-2.1.jar" crc="94F89669" length="86119"/>
		<jar name="jide-grids-3.7.2.jar" crc="BA25ADC0" length="545842"/>
		<jar name="forms-1.0.7.jar" crc="A5617906" length="26156"/>
		<jar name="guava-18.0.jar" crc="34EB2E0B" length="441989"/>
		<jar name="jython-2.5.3-ia3.jar" crc="7649E30A" length="3678377"/>
		<jar name="joda-time-2.3.jar" crc="C8E64FF1" length="167906"/>
		<jar name="slf4j-api-1.7.21.jar" crc="ED827065" length="13921"/>
		<jar name="gson-2.8.0.jar" crc="F814A00" length="53881"/>
		<jar name="logback-classic-1.1.7.jar" crc="9DAED028" length="85290"/>
		<jar name="alloy-1.4.4.ia1.jar" crc="F9EC2783" length="107335"/>
		<jar name="active-query-builder-7.9.10.jar" crc="26A27C0C" length="664015"/>
		<jar name="log4j-over-slf4j-1.7.21.jar" crc="DF2BDF66" length="6451"/>
		<jar name="cron4j-2.2.3.jar" crc="433BD78" length="10242"/>
		<jar name="commons-lang-1.0.jar" crc="66C5C0BA" length="21220"/>
		<jar name="jide-common-3.7.2.jar" crc="D9A67661" length="427664"/>
		<jar name="commons-math3-3.6.1.jar" crc="7F552947" length="594033"/>
		<jar name="commons-validator-1.4.1.jar" crc="DE62627D" length="60038"/>
		<jar name="logback-core-1.1.7.jar" crc="54C09D82" length="116933"/>
		<jar name="launchclient.jar" crc="635B0C67" length="298008"/>
	</module>
	<module name="rept" build="2018112813">
		<jar name=" __1233934139__ bcprov-ext-jdk15on-1.54.jar" crc="DB156DBA" length="840455"/>
		<jar name=" __1233934139__ icepdf-viewer-6.1.3.jar" crc="CACBE926" length="385205"/>
		<jar name=" __1233934139__ tools-jar-14.9.5.jar" crc="7D9A2343" length="1353619"/>
		<jar name=" __1233934139__ reporting-common-4.9.10.jar" crc="9B85C34E" length="1285162"/>
		<jar name=" __1233934139__ bcpkix-jdk15on-1.54.jar" crc="BF44A715" length="149508"/>
		<jar name=" __1233934139__ icepdf-core-6.1.3.jar" crc="942F157D" length="772357"/>
		<jar name=" __1233934139__ poi-3.14.jar" crc="960551FC" length="641921"/>
		<jar name=" __1233934139__ reporting-client-4.9.10.jar" crc="DCC3B2A1" length="1291896"/>
		<jar name=" __1233934139__ commons-codec-1.10.jar" crc="F6F29A02" length="92603"/>
		<jar name=" __1233934139__ bcprov-jdk15on-1.54.jar" crc="B3C2A04D" length="816133"/>
	</module>
	<module name="xopc" build="2018112813">
		<jar name=" __1203188602__ opc-ua-common-4.9.10.jar" crc="1755ADB7" length="370"/>
		<jar name=" __1203188602__ opc-ua-client-4.9.10.jar" crc="6C5FA03B" length="2357"/>
	</module>
	<module name="com.inductiveautomation.alarm-notification" build="2018112813">
		<jar name=" __3648090672__ alarm-notification-common-4.9.10.jar" crc="B5A59015" length="5808"/>
		<jar name=" __3648090672__ alarm-notification-client-4.9.10.jar" crc="6F587FB7" length="14242"/>
	</module>
	<module name="fpmi" build="2018112813">
		<jar name=" __765785812__ commons-logging-1.1.1.jar" crc="4B09A5F" length="26691"/>
		<jar name=" __765785812__ httpclient-4.2.6.jar" crc="99F0E8E7" length="101082"/>
		<jar name=" __765785812__ commons-codec-1.6.jar" crc="D4695169" length="72115"/>
		<jar name=" __765785812__ httpcore-4.2.5.jar" crc="4C5EB242" length="60946"/>
		<jar name=" __765785812__ vision-common-9.9.10.jar" crc="14BF310C" length="2081"/>
		<jar name=" __765785812__ vision-client-9.9.10.jar" crc="B31BF5C6" length="815423"/>
	</module>
	<module name="com.inductiveautomation.sfc" build="2018112821">
		<jar name=" __323776056__ sfc-client-3.9.10.jar" crc="2E2E340E" length="39015"/>
		<jar name=" __323776056__ sfc-common-3.9.10.jar" crc="296AFAB6" length="34695"/>
	</module>
	<module name="mobile" build="2018112821">
		<jar name=" __3963167437__ mobile-client-4.9.10.jar" crc="54837343" length="1850"/>
		<jar name=" __3963167437__ mobile-common-4.9.10.jar" crc="A8717991" length="2838"/>
	</module>
	<module name="fsql" build="2018112821">
		<jar name=" __3502128348__ sql-bridge-common-8.9.10.jar" crc="24C808A8" length="25236"/>
	</module>
	<module name="com.inductiveautomation.eam" build="2018112813">
		<jar name=" __654820924__ eam-client-2.9.10.jar" crc="319348B1" length="2287"/>
		<jar name=" __654820924__ eam-common-2.9.10.jar" crc="3A1E13B3" length="2348"/>
	</module>
	<module name="dnp3-driver" build="2018112813">
		<jar name=" __394611185__ dnp3-client-2.9.10.jar" crc="3B3FC215" length="2014"/>
		<jar name=" __394611185__ dnp3-common-2.9.10.jar" crc="9AB97BB3" length="566"/>
	</module>
	<thirdPartyModules md5="9e5b066b037adf9090cf78603e0ac9ee"/>
</launch>
Claiming id in C:\Users\robert.mosher\.ignition\cache\gw192.168.2.40_8088_8043_main...
... obtaining lock
... lock obtained.
... claimed id 0
Calculated necessary downloads:
<?xml version="1.0" encoding="UTF-8"?>
<launch scope="C">
	<module name="" build="2018112821">
	</module>
	<module name="rept" build="2018112813">
	</module>
	<module name="xopc" build="2018112813">
	</module>
	<module name="com.inductiveautomation.alarm-notification" build="2018112813">
	</module>
	<module name="fpmi" build="2018112813">
	</module>
	<module name="com.inductiveautomation.sfc" build="2018112821">
	</module>
	<module name="mobile" build="2018112821">
	</module>
	<module name="fsql" build="2018112821">
	</module>
	<module name="com.inductiveautomation.eam" build="2018112813">
	</module>
	<module name="dnp3-driver" build="2018112813">
	</module>
	<thirdPartyModules md5="null"/>
</launch>
Third party Python modules downloaded.
Successfully read project CPAcesInventory.proj from cache. Edit Count = 730, UUID = 81fad40a-b5aa-ecc9-acc7-b24619e7d9df
Cache file CPAcesInventory.proj loaded sucessfully from cache, downloading diff...
Downloading "http://192.168.2.40:8088/main/system/project/C/P/730/81fad40a-b5aa-ecc9-acc7-b24619e7d9df/AcesInventory"...
Connect successful.
Starting download of 1,951 bytes
Download successful
Successfully read project CP_global_.proj from cache. Edit Count = 0, UUID = fb64e026-adfa-1291-1612-fe12cdaa61f6
Cache file CP_global_.proj loaded sucessfully from cache, downloading diff...
Downloading "http://192.168.2.40:8088/main/system/project/C/P/0/fb64e026-adfa-1291-1612-fe12cdaa61f6/[global]"...
Connect successful.
Starting download of 325 bytes
Download successful
Downloading "http://192.168.2.40:8088/main/system/translations/"...
Connect successful.
Starting download of 428 bytes
Download successful
Creating classloader with JAR files: [file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/java-cup-10k.jar/00000000AB682326/java-cup-10k.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/commons-digester-1.8.1.jar/0000000020778438/commons-digester-1.8.1.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/miglayout-core-4.2.jar/00000000EC3CFA11/miglayout-core-4.2.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/jide-components-3.7.2.jar/0000000051C571C7/jide-components-3.7.2.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/jide-plaf-3.7.2.jar/000000005935398E/jide-plaf-3.7.2.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/common-7.9.10.jar/00000000B58BD9CB/common-7.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/commons-logging-1.2.jar/00000000DB4B9A00/commons-logging-1.2.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/commons-beanutils-1.8.3.jar/0000000086B560C6/commons-beanutils-1.8.3.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/client-api-7.9.10.jar/00000000938DD878/client-api-7.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/metrics-core-3.1.0.jar/00000000E8CF1893/metrics-core-3.1.0.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/bcprov-jdk16-unsign-1.46.jar/000000009AB21461/bcprov-jdk16-unsign-1.46.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/commons-lang3-3.3.2.jar/00000000E7839394/commons-lang3-3.3.2.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/commons-collections-3.2.1.jar/00000000CFFAC520/commons-collections-3.2.1.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/jul-to-slf4j-1.7.21.jar/000000000503F83A/jul-to-slf4j-1.7.21.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/core-java6-3.2.1.4.jar/00000000E8500B4B/core-java6-3.2.1.4.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/jfreechart-min-1.0.0.jar/00000000B0BAA748/jfreechart-min-1.0.0.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/commons-io-2.1.jar/0000000037C74DE0/commons-io-2.1.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/miglayout-swing-4.2.jar/000000006D970370/miglayout-swing-4.2.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/commons-cli-1.0.jar/0000000032913666/commons-cli-1.0.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/barcode4j-2.1.jar/0000000094F89669/barcode4j-2.1.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/jide-grids-3.7.2.jar/00000000BA25ADC0/jide-grids-3.7.2.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/forms-1.0.7.jar/00000000A5617906/forms-1.0.7.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/guava-18.0.jar/0000000034EB2E0B/guava-18.0.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/jython-2.5.3-ia3.jar/000000007649E30A/jython-2.5.3-ia3.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/joda-time-2.3.jar/00000000C8E64FF1/joda-time-2.3.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/slf4j-api-1.7.21.jar/00000000ED827065/slf4j-api-1.7.21.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/gson-2.8.0.jar/000000000F814A00/gson-2.8.0.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/logback-classic-1.1.7.jar/000000009DAED028/logback-classic-1.1.7.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/alloy-1.4.4.ia1.jar/00000000F9EC2783/alloy-1.4.4.ia1.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/active-query-builder-7.9.10.jar/0000000026A27C0C/active-query-builder-7.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/log4j-over-slf4j-1.7.21.jar/00000000DF2BDF66/log4j-over-slf4j-1.7.21.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/cron4j-2.2.3.jar/000000000433BD78/cron4j-2.2.3.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/commons-lang-1.0.jar/0000000066C5C0BA/commons-lang-1.0.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/jide-common-3.7.2.jar/00000000D9A67661/jide-common-3.7.2.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/commons-math3-3.6.1.jar/000000007F552947/commons-math3-3.6.1.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/commons-validator-1.4.1.jar/00000000DE62627D/commons-validator-1.4.1.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/platform/logback-core-1.1.7.jar/0000000054C09D82/logback-core-1.1.7.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/rept/ __1233934139__ bcprov-ext-jdk15on-1.54.jar/00000000DB156DBA/ __1233934139__ bcprov-ext-jdk15on-1.54.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/rept/ __1233934139__ icepdf-viewer-6.1.3.jar/00000000CACBE926/ __1233934139__ icepdf-viewer-6.1.3.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/rept/ __1233934139__ tools-jar-14.9.5.jar/000000007D9A2343/ __1233934139__ tools-jar-14.9.5.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/rept/ __1233934139__ reporting-common-4.9.10.jar/000000009B85C34E/ __1233934139__ reporting-common-4.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/rept/ __1233934139__ bcpkix-jdk15on-1.54.jar/00000000BF44A715/ __1233934139__ bcpkix-jdk15on-1.54.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/rept/ __1233934139__ icepdf-core-6.1.3.jar/00000000942F157D/ __1233934139__ icepdf-core-6.1.3.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/rept/ __1233934139__ poi-3.14.jar/00000000960551FC/ __1233934139__ poi-3.14.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/rept/ __1233934139__ reporting-client-4.9.10.jar/00000000DCC3B2A1/ __1233934139__ reporting-client-4.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/rept/ __1233934139__ commons-codec-1.10.jar/00000000F6F29A02/ __1233934139__ commons-codec-1.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/rept/ __1233934139__ bcprov-jdk15on-1.54.jar/00000000B3C2A04D/ __1233934139__ bcprov-jdk15on-1.54.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/xopc/ __1203188602__ opc-ua-common-4.9.10.jar/000000001755ADB7/ __1203188602__ opc-ua-common-4.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/xopc/ __1203188602__ opc-ua-client-4.9.10.jar/000000006C5FA03B/ __1203188602__ opc-ua-client-4.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/com.inductiveautomation.alarm-notification/ __3648090672__ alarm-notification-common-4.9.10.jar/00000000B5A59015/ __3648090672__ alarm-notification-common-4.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/com.inductiveautomation.alarm-notification/ __3648090672__ alarm-notification-client-4.9.10.jar/000000006F587FB7/ __3648090672__ alarm-notification-client-4.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/fpmi/ __765785812__ commons-logging-1.1.1.jar/0000000004B09A5F/ __765785812__ commons-logging-1.1.1.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/fpmi/ __765785812__ httpclient-4.2.6.jar/0000000099F0E8E7/ __765785812__ httpclient-4.2.6.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/fpmi/ __765785812__ commons-codec-1.6.jar/00000000D4695169/ __765785812__ commons-codec-1.6.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/fpmi/ __765785812__ httpcore-4.2.5.jar/000000004C5EB242/ __765785812__ httpcore-4.2.5.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/fpmi/ __765785812__ vision-common-9.9.10.jar/0000000014BF310C/ __765785812__ vision-common-9.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/fpmi/ __765785812__ vision-client-9.9.10.jar/00000000B31BF5C6/ __765785812__ vision-client-9.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/com.inductiveautomation.sfc/ __323776056__ sfc-client-3.9.10.jar/000000002E2E340E/ __323776056__ sfc-client-3.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/com.inductiveautomation.sfc/ __323776056__ sfc-common-3.9.10.jar/00000000296AFAB6/ __323776056__ sfc-common-3.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/mobile/ __3963167437__ mobile-client-4.9.10.jar/0000000054837343/ __3963167437__ mobile-client-4.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/mobile/ __3963167437__ mobile-common-4.9.10.jar/00000000A8717991/ __3963167437__ mobile-common-4.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/fsql/ __3502128348__ sql-bridge-common-8.9.10.jar/0000000024C808A8/ __3502128348__ sql-bridge-common-8.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/com.inductiveautomation.eam/ __654820924__ eam-client-2.9.10.jar/00000000319348B1/ __654820924__ eam-client-2.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/com.inductiveautomation.eam/ __654820924__ eam-common-2.9.10.jar/000000003A1E13B3/ __654820924__ eam-common-2.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/dnp3-driver/ __394611185__ dnp3-client-2.9.10.jar/000000003B3FC215/ __394611185__ dnp3-client-2.9.10.jar, file:/C:/Users/robert.mosher/.ignition/cache/resources/modules/dnp3-driver/ __394611185__ dnp3-common-2.9.10.jar/000000009AB97BB3/ __394611185__ dnp3-common-2.9.10.jar]
Starting class: com.inductiveautomation.factorypmi.application.runtime.ClientLaunchHook
10:35:51.947 [Thread-10] INFO com.inductiveautomation.factorypmi.application.runtime.ClientLaunchHook - Ignition Client v7.9.10 (b2018112821)
10:35:52.745 [Thread-10] INFO Localization.ClientLocalizationManager - Translation term database initialized successfully
10:35:52.761 [Thread-10] INFO com.inductiveautomation.ignition.client.gateway_interface.GatewayConnectionManager - Initializing gateway connection with URLs: [http://192.168.2.40:8088/main]
10:35:52.839 [Thread-10] INFO com.inductiveautomation.ignition.client.util.gui.progress.ClientProgressManager - Progress manager started.
10:35:53.582 [Thread-10] ERROR com.inductiveautomation.factorypmi.application.runtime.ClientLaunchHook - AD SSO login failed.
com.inductiveautomation.ignition.client.gateway_interface.GatewayException: Login failed.
	at com.inductiveautomation.ignition.client.gateway_interface.GatewayInterface.newGatewayException(GatewayInterface.java:341)
	at com.inductiveautomation.ignition.client.gateway_interface.GatewayInterface.sendMessage(GatewayInterface.java:315)
	at com.inductiveautomation.ignition.client.gateway_interface.GatewayInterface.sendMessage(GatewayInterface.java:268)
	at com.inductiveautomation.ignition.client.gateway_interface.GatewayInterface.invoke(GatewayInterface.java:894)
	at com.inductiveautomation.factorypmi.application.runtime.ClientGatewayConnection.doLogin(ClientGatewayConnection.java:93)
	at com.inductiveautomation.ignition.client.gateway_interface.AbstractGatewayConnection.login(AbstractGatewayConnection.java:891)
	at com.inductiveautomation.factorypmi.application.runtime.ClientLaunchHook$AutoLoginDelegate.loginAdSso(ClientLaunchHook.java:371)
	at com.inductiveautomation.factorypmi.application.runtime.ClientLaunchHook$AutoLoginDelegate.authenticate(ClientLaunchHook.java:291)
	at com.inductiveautomation.factorypmi.application.runtime.ClientLaunchHook.setup(ClientLaunchHook.java:263)
	at com.inductiveautomation.ignition.client.launch.steps.StartupStep.run(StartupStep.java:114)
	at com.inductiveautomation.ignition.client.launch.AbstractStepRunner.run(AbstractStepRunner.java:33)
	at java.lang.Thread.run(Unknown Source)
Caused by: com.inductiveautomation.ignition.client.gateway_interface.GatewayResponse$GatewayThrowable: Login failed.
	at com.inductiveautomation.ignition.gateway.servlets.gateway.functions.Login.client(Login.java:124)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at com.inductiveautomation.ignition.gateway.servlets.gateway.AbstractGatewayFunction.invoke(AbstractGatewayFunction.java:208)
	at com.inductiveautomation.ignition.gateway.servlets.Gateway.doPost(Gateway.java:404)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
	at com.inductiveautomation.ignition.gateway.bootstrap.MapServlet.service(MapServlet.java:85)
	at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:837)
	at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:583)
	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
	at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:548)
	at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:226)
	at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1160)
	at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:511)
	at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185)
	at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1092)
	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
	at org.eclipse.jetty.server.handler.HandlerList.handle(HandlerList.java:52)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:134)
	at org.eclipse.jetty.server.Server.handle(Server.java:518)
	at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:308)
	at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:244)
	at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:273)
	at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:95)
	at org.eclipse.jetty.io.SelectChannelEndPoint$2.run(SelectChannelEndPoint.java:93)
	at org.eclipse.jetty.util.thread.strategy.ExecuteProduceConsume.produceAndRun(ExecuteProduceConsume.java:246)
	at org.eclipse.jetty.util.thread.strategy.ExecuteProduceConsume.run(ExecuteProduceConsume.java:156)
	at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:654)
	at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:572)
	at java.lang.Thread.run(Thread.java:748)
Creating frame. extendedState=6, bounds=java.awt.Rectangle[x=0,y=0,width=1920,height=1080]

```

After some experimenting with other users I found that it is just my username that will not authenticate. All other users that I have tried are working fine. I have been testing with just my username while trying different queries and setting up the user source. Is there a cache somewhere that I need to clear?

---

<div class="post-metadata">

**Author:** ![robert.mosher](https://avatars.discourse-cdn.com/v4/letter/r/7cd45c/32.png) [@robert.mosher](https://forum.inductiveautomation.com/u/robert.mosher)\
**Post date:** [January 18, 2019, 6:00pm UTC](https://forum.inductiveautomation.com/t/ad-db-hybrid-authenticates-successfully-but-login-fails-for-manual-and-sso-login/21978/2 "2019-01-18T18:00:04Z")

</div>

I figured it out. The User Properties Query does not handle null values correctly. I had my user record in the database with just username, firstname, and lastname populated. The schedule, language, and notes columns were returned null which caused the login to fail.

This is a bug in my opinion because if I log in with an active directory user who has no record in the users table, The login succeeds with the default 'Always' schedule and no roles applied as expected. However, if I add a record to the database for that user and leave the schedule column null, there is an internal error that causes the login to fail. There is no mention of null requirements in the query description.

From the description of the User Properties Query:

> A query that returns the basic properties for a single user. Supported return columns are [firstname, lastname, schedule, language, notes]. The username will be inserted into this query as a parameter.  
> Example: SELECT firstname, lastname, schedule, language, notes FROM user\_table WHERE username = ?