# Can I autologin individuals when using AD/Internal Hybrid

**URL:** <https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704>\
**Category:** Archived Topics\
**Created:** [June 19, 2008, 5:05pm UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704 "2008-06-19T17:05:53Z")\
**Posts on this page:** 18\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ron](https://avatars.discourse-cdn.com/v4/letter/r/ecae2f/32.png) [@Ron](https://forum.inductiveautomation.com/u/Ron)\
**Post date:** [June 19, 2008, 5:05pm UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/1 "2008-06-19T17:05:53Z")

</div>

I know, stupid question. Can I get around the security module we have chosen to use for the project for certian users?

I have a manager of the department that wants to either be able to save his password or auto log him in when he uses the fpmi application, but wants only the other members of his department to be able to get into the applicaion. We currently are using the AD/Internal Hybrid type so we don’t have to maintain a seperate password list for them. Will I need to switch security types to accomodate this person, or is there a way to code around it?

---

<div class="post-metadata">

**Author:** ![Carl.Gould](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/carl.gould/32/7262_2.png) [@Carl.Gould](https://forum.inductiveautomation.com/u/Carl.Gould)\
**Post date:** [June 19, 2008, 8:20pm UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/2 "2008-06-19T20:20:17Z")

</div>

I don’t think you’re going to be able to accommodate him at all, unfortunately. I mean, without logging in, how is the application going to know that its this one special user that doesn’t need to log in?

Saving passwords is a possibility, but I’m not sure I like it for security reasons, especially given the shared computer environments that SCADA clients typically get installed in. I suppose it could be an option…

---

<div class="post-metadata">

**Author:** ![Ron](https://avatars.discourse-cdn.com/v4/letter/r/ecae2f/32.png) [@Ron](https://forum.inductiveautomation.com/u/Ron)\
**Post date:** [June 19, 2008, 8:26pm UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/3 "2008-06-19T20:26:27Z")

</div>

Thanks. That’s basically what I thought. The more I think about it, circumventing the security is just a bad idea. It’s either open to everyone, or it’s controlled access. I think we will let our network security guy handle this request and if it is something the manager can’t live with, I’ll change the security model.

Thanks for the feed back!

---

<div class="post-metadata">

**Author:** ![Carl.Gould](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/carl.gould/32/7262_2.png) [@Carl.Gould](https://forum.inductiveautomation.com/u/Carl.Gould)\
**Post date:** [June 19, 2008, 8:31pm UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/4 "2008-06-19T20:31:33Z")

</div>

One thing that I should mention that might address this request is a concept called Single Sign On (SSO). With SSO, FactoryPMI would attempt to automatically log in using the current windows credentials (this would only work with an Active Directory-based authentication profile, and would only work on Windows clients).

We haven’t done much research into SSO with FactoryPMI, I’m not even sure its possible, but I’ll try to see if I can’t dig up some more information about it…

---

<div class="post-metadata">

**Author:** ![JordanCClark](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jordancclark/32/83362_2.png) [@JordanCClark](https://forum.inductiveautomation.com/u/JordanCClark)\
**Post date:** [September 24, 2009, 11:54am UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/5 "2009-09-24T11:54:04Z")

</div>

I’m going to bump this once to see if anything further has happened with SSO and I just missed it… 😒

---

<div class="post-metadata">

**Author:** ![Carl.Gould](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/carl.gould/32/7262_2.png) [@Carl.Gould](https://forum.inductiveautomation.com/u/Carl.Gould)\
**Post date:** [September 24, 2009, 4:42pm UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/6 "2009-09-24T16:42:05Z")

</div>

Sorry, nothing more has happened on the SSO front. It is possible, but would take a bit of work on our part, and our development schedule is a bit full at the moment. Vote here if this feature is of interest to you.

---

<div class="post-metadata">

**Author:** ![Ron](https://avatars.discourse-cdn.com/v4/letter/r/ecae2f/32.png) [@Ron](https://forum.inductiveautomation.com/u/Ron)\
**Post date:** [September 28, 2009, 8:40pm UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/7 "2009-09-28T20:40:44Z")

</div>

We would be interested, as for some reason our “manager” users feel like logging into an application, once they are logged into our network, is too much extra work for them.  
Thanks,  
Ron

---

<div class="post-metadata">

**Author:** ![JordanCClark](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jordancclark/32/83362_2.png) [@JordanCClark](https://forum.inductiveautomation.com/u/JordanCClark)\
**Post date:** [September 28, 2009, 10:07pm UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/8 "2009-09-28T22:07:53Z")

</div>

Put me on the list, too. This would definitely appeal to managers’ sense of lazy. 😉

---

<div class="post-metadata">

**Author:** ![Dustin.Phillips](https://avatars.discourse-cdn.com/v4/letter/d/45deac/32.png) [@Dustin.Phillips](https://forum.inductiveautomation.com/u/Dustin.Phillips)\
**Post date:** [April 26, 2013, 9:48pm UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/9 "2013-04-26T21:48:14Z")

</div>

+1 For SSO!

---

<div class="post-metadata">

**Author:** ![jamess](https://avatars.discourse-cdn.com/v4/letter/j/87869e/32.png) [@jamess](https://forum.inductiveautomation.com/u/jamess)\
**Post date:** [June 17, 2013, 9:56pm UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/10 "2013-06-17T21:56:41Z")

</div>

Another +1 for SSO.

---

<div class="post-metadata">

**Author:** ![jim\_lapratt](https://avatars.discourse-cdn.com/v4/letter/j/cc9497/32.png) [@jim\_lapratt](https://forum.inductiveautomation.com/u/jim_lapratt)\
**Post date:** [June 18, 2013, 12:38pm UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/11 "2013-06-18T12:38:33Z")

</div>

+1 Here also

---

<div class="post-metadata">

**Author:** ![Carl.Gould](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/carl.gould/32/7262_2.png) [@Carl.Gould](https://forum.inductiveautomation.com/u/Carl.Gould)\
**Post date:** [June 19, 2013, 4:21pm UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/12 "2013-06-19T16:21:41Z")

</div>

Just wanted to post back here so you guys know your votes aren’t going into the ether!

---

<div class="post-metadata">

**Author:** ![pat.stave](https://avatars.discourse-cdn.com/v4/letter/p/96bed5/32.png) [@pat.stave](https://forum.inductiveautomation.com/u/pat.stave)\
**Post date:** [July 19, 2013, 11:57pm UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/13 "2013-07-19T23:57:05Z")

</div>

+1

This is the one thing i always hear end users complaining about, and also the only feature available in Simatic WinCC that is not available in Ignition 😲

Our users use 6 monitor stations, and want to launch multiple instances. This means that they have to type their credentials up to 6 times.

---

<div class="post-metadata">

**Author:** ![rdeavers](https://avatars.discourse-cdn.com/v4/letter/r/779978/32.png) [@rdeavers](https://forum.inductiveautomation.com/u/rdeavers)\
**Post date:** [October 15, 2013, 10:28pm UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/14 "2013-10-15T22:28:58Z")

</div>

+1 also.

Thank you.

---

<div class="post-metadata">

**Author:** ![pdibenedetto](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pdibenedetto/32/6364_2.png) [@pdibenedetto](https://forum.inductiveautomation.com/u/pdibenedetto)\
**Post date:** [October 16, 2013, 12:05am UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/15 "2013-10-16T00:05:32Z")

</div>

+1… and if you do it for authentication profiles configured in Gateway and Designer, better.

---

<div class="post-metadata">

**Author:** ![pat.stave](https://avatars.discourse-cdn.com/v4/letter/p/96bed5/32.png) [@pat.stave](https://forum.inductiveautomation.com/u/pat.stave)\
**Post date:** [October 16, 2013, 7:40pm UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/16 "2013-10-16T19:40:15Z")

</div>

Any specific plans for implementing this? Remember that all of us Ignition users are born unpatient (thats why we dont use Wonderware 😆 ).

---

<div class="post-metadata">

**Author:** ![pat.stave](https://avatars.discourse-cdn.com/v4/letter/p/96bed5/32.png) [@pat.stave](https://forum.inductiveautomation.com/u/pat.stave)\
**Post date:** [July 11, 2014, 10:14am UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/17 "2014-07-11T10:14:57Z")

</div>

Great news for version 7.7! ![:thumb_right:](https://us1.discourse-cdn.com/inductiveautomation/original/1X/2026e28c0c425034352c1b75807edf956adc75f4.gif ":thumb\_right:")

 ![](https://us1.discourse-cdn.com/inductiveautomation/original/2X/a/a5d6eab040e6231f62cff8ddf72697214391da3d.png)

---

<div class="post-metadata">

**Author:** ![Luke.Stone](https://avatars.discourse-cdn.com/v4/letter/l/5fc32e/32.png) [@Luke.Stone](https://forum.inductiveautomation.com/u/Luke.Stone)\
**Post date:** [August 14, 2014, 3:29pm UTC](https://forum.inductiveautomation.com/t/can-i-autologin-individuals-when-using-ad-internal-hybrid/704/18 "2014-08-14T15:29:08Z")

</div>

I’m just updating this post to confirm that SSO has been implemented in 7.7.0. You can read about it more in the 7.7 manual.
