# Checking current user password in perspective **URL:** \ **Category:** Ignition Early Access\ **Created:** [January 22, 2021, 1:29pm UTC](https://forum.inductiveautomation.com/t/checking-current-user-password-in-perspective/42520 "2021-01-22T13:29:45Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![nader.chinichian](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nader.chinichian/32/9261_2.png) [@nader.chinichian](https://forum.inductiveautomation.com/u/nader.chinichian)\ **Post date:** [January 22, 2021, 1:29pm UTC](https://forum.inductiveautomation.com/t/checking-current-user-password-in-perspective/42520/1 "2021-01-22T13:29:45Z")
Hello, For default security provider, is there any way to check current user password in perspective session? I need this because for sending some commands, system should check to see if the one who send the command is actually the one whose is already logged in. In vision there **system.security.validateUser** for this purpose but there is not such option in perspective default security provider. ---
**Author:** ![deon.korb](https://avatars.discourse-cdn.com/v4/letter/d/8c91f0/32.png) [@deon.korb](https://forum.inductiveautomation.com/u/deon.korb)\ **Post date:** [January 22, 2021, 3:08pm UTC](https://forum.inductiveautomation.com/t/checking-current-user-password-in-perspective/42520/2 "2021-01-22T15:08:10Z")
There was a force auth added to the login: [https://docs.inductiveautomation.com/display/DOC81/system.perspective.login](https://docs.inductiveautomation.com/display/DOC81/system.perspective.login) This will force the user to re enter his credentials. I just don’t know how to wait for that in your script. Interested to know ---
**Author:** ![nader.chinichian](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nader.chinichian/32/9261_2.png) [@nader.chinichian](https://forum.inductiveautomation.com/u/nader.chinichian)\ **Post date:** [January 22, 2021, 3:50pm UTC](https://forum.inductiveautomation.com/t/checking-current-user-password-in-perspective/42520/3 "2021-01-22T15:50:35Z")
This cause login logout loop to send a command. Not acceptable for client ---
**Author:** ![chasondeshotel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/chasondeshotel/32/20032_2.png) [@chasondeshotel](https://forum.inductiveautomation.com/u/chasondeshotel)\ **Post date:** [January 22, 2021, 5:51pm UTC](https://forum.inductiveautomation.com/t/checking-current-user-password-in-perspective/42520/4 "2021-01-22T17:51:04Z")
User information is available in the session properties ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/9/2/926655220b8988e395855b56405a8fff88c29494.png) ---
**Author:** ![chasondeshotel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/chasondeshotel/32/20032_2.png) [@chasondeshotel](https://forum.inductiveautomation.com/u/chasondeshotel)\ **Post date:** [January 22, 2021, 5:58pm UTC](https://forum.inductiveautomation.com/t/checking-current-user-password-in-perspective/42520/5 "2021-01-22T17:58:24Z")
Or are you looking for something like ```auto # When forceAuth is True, the user will always be required to type in their credentials, even if they're already logged in. system.perspective.login(forceAuth = True) ``` ---
**Author:** ![nader.chinichian](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nader.chinichian/32/9261_2.png) [@nader.chinichian](https://forum.inductiveautomation.com/u/nader.chinichian)\ **Post date:** [January 22, 2021, 6:12pm UTC](https://forum.inductiveautomation.com/t/checking-current-user-password-in-perspective/42520/6 "2021-01-22T18:12:53Z")
I need similar behavior like **system.security.validateUser** in vision. Just simple function and I get user password and pass to it and it check and them true and false. The system.persective.login function is really slow and it re download all session resource each time which is not ok here. I just need to confirm the command issue by the operator and not someone else. ---
**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\ **Post date:** [January 22, 2021, 6:16pm UTC](https://forum.inductiveautomation.com/t/checking-current-user-password-in-perspective/42520/7 "2021-01-22T18:16:18Z")
There’s nothing like this, and probably won’t be, due to how identity providers work. If you’re concerned about users other than an authorized user working from a Perspective session, configure automatic logout/idle timeouts appropriately, or train users to lock/log out their sessions appropriately. You _can’t_ perform a direct authentication check with an identity provider, other than the full session redirect & login. ---
**Author:** ![nader.chinichian](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nader.chinichian/32/9261_2.png) [@nader.chinichian](https://forum.inductiveautomation.com/u/nader.chinichian)\ **Post date:** [January 22, 2021, 6:21pm UTC](https://forum.inductiveautomation.com/t/checking-current-user-password-in-perspective/42520/8 "2021-01-22T18:21:53Z")
So is there any way I can get all user password that already save in default identity provider? If I can access this table I can do this manually. ---
**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\ **Post date:** [January 22, 2021, 6:24pm UTC](https://forum.inductiveautomation.com/t/checking-current-user-password-in-perspective/42520/9 "2021-01-22T18:24:54Z")
Not it any supported way. All passwords in Ignition’s internal DB are salted and hashed, as well. For a different idea, that you can implement yourself - what if you maintain your own table of user PINs/etc in your own DB, then require the user to positively verify before doing anything? That’s something you could absolutely do. ---
**Author:** ![nader.chinichian](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/nader.chinichian/32/9261_2.png) [@nader.chinichian](https://forum.inductiveautomation.com/u/nader.chinichian)\ **Post date:** [January 22, 2021, 6:43pm UTC](https://forum.inductiveautomation.com/t/checking-current-user-password-in-perspective/42520/10 "2021-01-22T18:43:53Z")
Sure. Good idea and easy to implement.