# AD/Hybrid Vision Auto Login **URL:** \ **Category:** Ignition\ **Created:** [February 11, 2011, 5:32pm UTC](https://forum.inductiveautomation.com/t/ad-hybrid-vision-auto-login/2632 "2011-02-11T17:32:19Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![taspencer](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/taspencer/32/60881_2.png) [@taspencer](https://forum.inductiveautomation.com/u/taspencer)\ **Post date:** [February 11, 2011, 5:32pm UTC](https://forum.inductiveautomation.com/t/ad-hybrid-vision-auto-login/2632/1 "2011-02-11T17:32:19Z")
Vision Module v4.2.2 Ignition v7.2.2. I am currently using AD/Hybrid to authenticate users. These users are already logged into our corporate domain. Can I set the client up to bypass the login screen based on the users’ already authenticated credentials? Thanks in advance. ---
**Author:** ![Travis.Cox](https://avatars.discourse-cdn.com/v4/letter/t/b9bd4f/32.png) [@Travis.Cox](https://forum.inductiveautomation.com/u/Travis.Cox)\ **Post date:** [February 11, 2011, 7:26pm UTC](https://forum.inductiveautomation.com/t/ad-hybrid-vision-auto-login/2632/2 "2011-02-11T19:26:50Z")
Yes, you can go into the Ignition Designer -\> Project Properties to setup auto-login. It is under Client -\> Login. You just need to give it a valid username and password that will work in the authentication profile. ---
**Author:** ![taspencer](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/taspencer/32/60881_2.png) [@taspencer](https://forum.inductiveautomation.com/u/taspencer)\ **Post date:** [February 11, 2011, 7:38pm UTC](https://forum.inductiveautomation.com/t/ad-hybrid-vision-auto-login/2632/3 "2011-02-11T19:38:51Z")
Thanks for the response. If I have ‘userA’ and ‘userB’ and I have Window1 and Window2, will this type of auto login allow me to grant ‘userA’ access to Window1, but disallow ‘userB’? ---
**Author:** ![Travis.Cox](https://avatars.discourse-cdn.com/v4/letter/t/b9bd4f/32.png) [@Travis.Cox](https://forum.inductiveautomation.com/u/Travis.Cox)\ **Post date:** [February 11, 2011, 8:07pm UTC](https://forum.inductiveautomation.com/t/ad-hybrid-vision-auto-login/2632/4 "2011-02-11T20:07:06Z")
Sure, you can do that by the user’s roles. ‘userA’ could be in a role that allows access to the window where ‘userB’ doesn’t. ---
**Author:** ![taspencer](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/taspencer/32/60881_2.png) [@taspencer](https://forum.inductiveautomation.com/u/taspencer)\ **Post date:** [February 11, 2011, 8:18pm UTC](https://forum.inductiveautomation.com/t/ad-hybrid-vision-auto-login/2632/5 "2011-02-11T20:18:55Z")
If I use ‘userA’ for the auto login, would that grant all who start the vision client 'userA’s permissions? ---
**Author:** ![Travis.Cox](https://avatars.discourse-cdn.com/v4/letter/t/b9bd4f/32.png) [@Travis.Cox](https://forum.inductiveautomation.com/u/Travis.Cox)\ **Post date:** [February 11, 2011, 9:18pm UTC](https://forum.inductiveautomation.com/t/ad-hybrid-vision-auto-login/2632/6 "2011-02-11T21:18:38Z")
Yes, so you can ‘userA’ read-only or no privileges. ---
**Author:** ![Carl.Gould](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/carl.gould/32/7262_2.png) [@Carl.Gould](https://forum.inductiveautomation.com/u/Carl.Gould)\ **Post date:** [February 24, 2011, 6:02pm UTC](https://forum.inductiveautomation.com/t/ad-hybrid-vision-auto-login/2632/7 "2011-02-24T18:02:34Z")
I think what you were really asking for here is something called “Single Sign-On” (SSO). That is, have the Ignition client log on using credentials of the current window’s session. Unfortunately this isn’t currently available. This is tricky for us to implement due to our cross-platform support, and SSO would only work on Windows. ---
**Author:** ![taspencer](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/taspencer/32/60881_2.png) [@taspencer](https://forum.inductiveautomation.com/u/taspencer)\ **Post date:** [February 25, 2011, 2:15pm UTC](https://forum.inductiveautomation.com/t/ad-hybrid-vision-auto-login/2632/8 "2011-02-25T14:15:45Z")
Exactly what I was looking for. Thanks for the reply. ---
**Author:** ![JordanCClark](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jordancclark/32/83362_2.png) [@JordanCClark](https://forum.inductiveautomation.com/u/JordanCClark)\ **Post date:** [February 25, 2011, 3:33pm UTC](https://forum.inductiveautomation.com/t/ad-hybrid-vision-auto-login/2632/9 "2011-02-25T15:33:50Z")
Could roles be mapped to the OSUsername instead of Username? ---
**Author:** ![Carl.Gould](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/carl.gould/32/7262_2.png) [@Carl.Gould](https://forum.inductiveautomation.com/u/Carl.Gould)\ **Post date:** [March 3, 2011, 10:56pm UTC](https://forum.inductiveautomation.com/t/ad-hybrid-vision-auto-login/2632/10 "2011-03-03T22:56:58Z")
Not as it is currently constructed, because the roles come from the authentication profile as a result of the login operation.