# AD/Internal Hybrid User contact info not updating from AD **URL:** \ **Category:** Ignition\ **Tags:** security\ **Created:** [September 12, 2024, 11:54am UTC](https://forum.inductiveautomation.com/t/ad-internal-hybrid-user-contact-info-not-updating-from-ad/95892 "2024-09-12T11:54:33Z")\ **Posts on this page:** 11\ **Page:** 1
**Author:** ![DavidO](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/davido/32/53092_2.png) [@DavidO](https://forum.inductiveautomation.com/u/DavidO)\ **Post date:** [September 12, 2024, 11:54am UTC](https://forum.inductiveautomation.com/t/ad-internal-hybrid-user-contact-info-not-updating-from-ad/95892/1 "2024-09-12T11:54:33Z")
Need some help on AD/Internal Hybrid user source. I cannot get some user source contact info to update from AD. The users SMS-nr is used to send SMS-alarms so it is vital that updating in the AD takes effect in the User Source. SETUP _User Source_ Type: AD/Internal Hybrid Failover source: None List Users from Active Directory: T (Active Directory will be queried for the list of all users). Populate Users On-Demand: T (user record will be created in the Internal Database from the AD entry of any user who successfully authenticates into AD if the record does not already exist in the Internal Database at the time of authentication.) SMS Attribute: mobile (Only used during initial user creation when populate users on-demand feature is enabled). _AD_ The AD has the phone numbers in the 'Mobile' Attribute field. DEBUGGING A specific user causing problems did not have any phone number in the AD when User Source was "set up" first time. Tried disabeling "Populate Users On-Demand" and creating the "SMS" contact info manually (with some dummy nr) - the AD value does not update. Also tried on my personal user as well, changing my number in Ignition User Source, it does not update "back". Ignition connects to AD without errors (UserSource.AD\_Internal\_Hybrid): ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/a/8/a8304a4fed1f575d5c279bfedcb1234216741b6b.png) Having a hard time finding how the contact info is Any ideas on next actions? BR /David ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [September 12, 2024, 12:04pm UTC](https://forum.inductiveautomation.com/t/ad-internal-hybrid-user-contact-info-not-updating-from-ad/95892/2 "2024-09-12T12:04:29Z")
Ignition doesn't send anything back to AD, ever, whether hybrid or not. With the hybrid, all contact info, and roles, and any other aux info must be maintained in Ignition after initial user copy. ---
**Author:** ![DavidO](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/davido/32/53092_2.png) [@DavidO](https://forum.inductiveautomation.com/u/DavidO)\ **Post date:** [September 12, 2024, 12:25pm UTC](https://forum.inductiveautomation.com/t/ad-internal-hybrid-user-contact-info-not-updating-from-ad/95892/3 "2024-09-12T12:25:14Z")
Excellent clear answer, thank you Phil! So is a second pure AD user source for the users in my roster my solution here? /David ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [September 12, 2024, 12:50pm UTC](https://forum.inductiveautomation.com/t/ad-internal-hybrid-user-contact-info-not-updating-from-ad/95892/4 "2024-09-12T12:50:44Z")
I don't have much experience configuring it (I let my clients handle their own Microsoft management actions), but I usually see regular AD user sources deployed with soft fallback to an internal user source. Not hybrids. ---
**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\ **Post date:** [September 12, 2024, 1:20pm UTC](https://forum.inductiveautomation.com/t/ad-internal-hybrid-user-contact-info-not-updating-from-ad/95892/5 "2024-09-12T13:20:44Z")
> [@DavidO](#): > > Failover source: None I recommend setting up a soft failover to Ignition's Default user source and leave the Administrator user set up there. That way, if you ever mess up the AD settings and lock yourself out you can get in to fix it. ---
**Author:** ![DavidO](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/davido/32/53092_2.png) [@DavidO](https://forum.inductiveautomation.com/u/DavidO)\ **Post date:** [September 12, 2024, 1:42pm UTC](https://forum.inductiveautomation.com/t/ad-internal-hybrid-user-contact-info-not-updating-from-ad/95892/6 "2024-09-12T13:42:59Z")
Thanks for the tip! We have separate admin user accounts residing in the default provider, should that happen. But I'll make a mental note, think it could solve som issues I have when running a backup in a Docker container.... ---
**Author:** ![cesrom](https://avatars.discourse-cdn.com/v4/letter/c/ea666f/32.png) [@cesrom](https://forum.inductiveautomation.com/u/cesrom)\ **Post date:** [April 9, 2025, 6:16pm UTC](https://forum.inductiveautomation.com/t/ad-internal-hybrid-user-contact-info-not-updating-from-ad/95892/7 "2025-04-09T18:16:48Z")
I was split between adding this comment or creating a new topic, but it appears to me that this still needs an answer. We have been using an AD/Internal Hybrid setup for a while now. One of our users, who is subscribed to SMS alerts, had their mobile number updated in AD. However, the old number is still listed in Ignition. I initially thought the changes might eventually propagate and sync, but it seems this won't happen automatically. It feels like our only option is to update the number manually within Ignition. Is there a way to force a re-sync? If not, could this be considered as a new feature? Thanks ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [April 9, 2025, 6:22pm UTC](https://forum.inductiveautomation.com/t/ad-internal-hybrid-user-contact-info-not-updating-from-ad/95892/8 "2025-04-09T18:22:20Z")
Have you tried deleting the user on the Ignition side? And then having them log back in? (That's the only path that comes to mind.) ---
**Author:** ![cesrom](https://avatars.discourse-cdn.com/v4/letter/c/ea666f/32.png) [@cesrom](https://forum.inductiveautomation.com/u/cesrom)\ **Post date:** [April 9, 2025, 8:19pm UTC](https://forum.inductiveautomation.com/t/ad-internal-hybrid-user-contact-info-not-updating-from-ad/95892/9 "2025-04-09T20:19:48Z")
To my knowledge, I can only add/edit roles. For testing purposes, I created a new AD/Internal user source, and the user did have the new mobile number. Then, I tried updating the **User Listing Base** query to force a re-sync, but the mobile number was not updated on the User Source we've been using. A quick look at **config.idb** , makes me think that once a user is added to the **INTERNALUSERTABLE** , their contact details are also inserted into **INTERNALCONTACTINFOTABLE** and are _never_ updated. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [April 9, 2025, 8:25pm UTC](https://forum.inductiveautomation.com/t/ad-internal-hybrid-user-contact-info-not-updating-from-ad/95892/10 "2025-04-09T20:25:04Z")
Perhaps you need to abandon the hybrid. As noted above, none of my clients use it. ---
**Author:** ![cesrom](https://avatars.discourse-cdn.com/v4/letter/c/ea666f/32.png) [@cesrom](https://forum.inductiveautomation.com/u/cesrom)\ **Post date:** [April 9, 2025, 8:39pm UTC](https://forum.inductiveautomation.com/t/ad-internal-hybrid-user-contact-info-not-updating-from-ad/95892/11 "2025-04-09T20:39:13Z")
Or, maybe, IA can introduce a mechanism for synching with AD. > **[Sync/Re-sync feature for AD Hybrid user sources | Ignition Features and Ideas...](https://ideas.inductiveautomation.com/ignition-features-and-ideas/p/sync-re-sync-feature-for-ad-hybrid-user-sources)** > > I would like to have a way to force synching with AD on-demand. I've had one instance where one of our users switched mobile numbers however their contact