# Azure Load Balancer with Ignition Cloud Edition and IDP

**URL:** <https://forum.inductiveautomation.com/t/azure-load-balancer-with-ignition-cloud-edition-and-idp/106919>\
**Category:** Ignition\
**Tags:** ignition81, perspective\
**Created:** [June 2, 2025, 9:13pm UTC](https://forum.inductiveautomation.com/t/azure-load-balancer-with-ignition-cloud-edition-and-idp/106919 "2025-06-02T21:13:34Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mudbay](https://avatars.discourse-cdn.com/v4/letter/m/a4c791/32.png) [@mudbay](https://forum.inductiveautomation.com/u/mudbay)\
**Post date:** [June 2, 2025, 9:13pm UTC](https://forum.inductiveautomation.com/t/azure-load-balancer-with-ignition-cloud-edition-and-idp/106919/1 "2025-06-02T21:13:34Z")

</div>

Reaching out to the forum to see if anyone has experience with configuring an **Azure Load Balancer with Ignition Cloud Edition and IDP**. I have reviewed the AWS Ignition KB ([Application Load Balancers and Ignition](https://support.inductiveautomation.com/hc/en-us/articles/4436376996877-AWS-Application-Load-Balancers-and-Ignition?input_string=securely+using+ignition+with+load+balancer+-+how+to%3F)), but there are (from what I can tell) some differences in the Azure environment.

The pseudo process I am hoping for is:

1. Client goes to URL --\> Load Balancer (End point [somewhere.com](http://somewhere.com))
2. Load Balance (LB) --\> IDP (LB redirects Client to IDP for authentication)
3. IDP --\> LB (IDP authenticates user and pass token to LB)
4. LB --\> Ignition Gateway (Load balancer pass user token to Gateway with a 'sticky' session connection.)
5. Ignition Gateway (IGW) --\> LB --\> Client (Perspective page received by user)

Any experience out there that I can draw upon?

---

<div class="post-metadata">

**Author:** ![kcollins](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kcollins/32/19646_2.png) [@kcollins](https://forum.inductiveautomation.com/u/kcollins)\
**Post date:** [June 4, 2025, 1:53pm UTC](https://forum.inductiveautomation.com/t/azure-load-balancer-with-ignition-cloud-edition-and-idp/106919/2 "2025-06-04T13:53:39Z")

</div>

I think you'll want to actually configure Ignition with an [Identity Provider}([Configuring Identity Providers | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.1/platform/security/identity-provider-authentication-strategy/configuring-identity-providers)) configuration instead of having the Azure LB inject the auth. A few reasons why include:

- With the proposed configuration, you won't be able to launch the Designer (it doesn't yet tolerate that kind of injected auth flow) against the gateway. You'd need a separate path.
- While you could use this method to "gate" access to a Perspective app, you won't be able to leverage any Ignition security features, as the user won't be logged into the app itself.

---

<div class="post-metadata">

**Author:** ![mudbay](https://avatars.discourse-cdn.com/v4/letter/m/a4c791/32.png) [@mudbay](https://forum.inductiveautomation.com/u/mudbay)\
**Post date:** [June 9, 2025, 3:45pm UTC](https://forum.inductiveautomation.com/t/azure-load-balancer-with-ignition-cloud-edition-and-idp/106919/3 "2025-06-09T15:45:23Z")

</div>

Thanks Kevin. Good insight.