# Edge authentication

**URL:** <https://forum.inductiveautomation.com/t/edge-authentication/96707>\
**Category:** Ignition\
**Tags:** perspective\
**Created:** [October 2, 2024, 1:31pm UTC](https://forum.inductiveautomation.com/t/edge-authentication/96707 "2024-10-02T13:31:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![SBL](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sbl/32/56813_2.png) [@SBL](https://forum.inductiveautomation.com/u/SBL)\
**Post date:** [October 2, 2024, 1:31pm UTC](https://forum.inductiveautomation.com/t/edge-authentication/96707/1 "2024-10-02T13:31:26Z")

</div>

Hi all! 🙂

Is it possible to authenticate the Perspective session on an (wan-offline) Edge gateway, trough the IDP defined on a central Ignition server?

The central is configured to use Entra ID, and this works well on the central Perspective sessions.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [October 2, 2024, 1:50pm UTC](https://forum.inductiveautomation.com/t/edge-authentication/96707/2 "2024-10-02T13:50:31Z")

</div>

An IdP must be reachable directly by the client browser. If you can configure a proxy for IdP URL, you should be able to make it work. But be aware that you won't be able to authenticate at the Edge if the WAN is down.

---

<div class="post-metadata">

**Author:** ![SBL](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sbl/32/56813_2.png) [@SBL](https://forum.inductiveautomation.com/u/SBL)\
**Post date:** [October 3, 2024, 7:03am UTC](https://forum.inductiveautomation.com/t/edge-authentication/96707/3 "2024-10-03T07:03:25Z")

</div>

Hi Phil, thanks for replying!

We could do this by adding Entra as a Identify provider on the Edge as well, and the gateway will need a proxy or wan access to the IdP URL. Is that a good summary, there is no way to do this within the gateway network and central server? 🙂
