# \[FEATURE-1402\] Perspective "autologin" IdP

**URL:** <https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221>\
**Category:** Ignition\
**Tags:** ignition80, perspective\
**Created:** [November 2, 2020, 8:52pm UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221 "2020-11-02T20:52:14Z")\
**Posts on this page:** 18\
**Page:** 1

<div class="post-metadata">

**Author:** ![ryanjmclaughlin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ryanjmclaughlin/32/4318_2.png) [@ryanjmclaughlin](https://forum.inductiveautomation.com/u/ryanjmclaughlin)\
**Post date:** [November 2, 2020, 8:52pm UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/1 "2020-11-02T20:52:14Z")

</div>

We are using Office365 as our IdP. We have multiple projects, but always get the Sign In screen when navigating to the Perspective project. 95% of the time the users browser is already authenticated to Office365 and clicking sign in, just completes the auth and loads the Perspective Project.

Is their a way to have Ignition automatically attempt the sign in attempt and bypass this screen? It would make for a much better user experience in our environment.

![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/b/3b85dd4c8f73771fde44c164835442fe94358e8a.png)

---

<div class="post-metadata">

**Author:** ![ryanjmclaughlin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ryanjmclaughlin/32/4318_2.png) [@ryanjmclaughlin](https://forum.inductiveautomation.com/u/ryanjmclaughlin)\
**Post date:** [November 23, 2020, 3:40pm UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/2 "2020-11-23T15:40:35Z")

</div>

Anyone have ideas on this? One less click to login would be nice.

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [November 23, 2020, 4:22pm UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/3 "2020-11-23T16:22:31Z")

</div>

@jspecht will correct me, but I _believe_ we basically have to do this, because Perspective/Ignition _isn’t_ holding on to the auth, so we have to ask the delegated IdP for that info. Automatically attempting a sign-on seems like a bad idea, but I don’t know enough to say for sure.

---

<div class="post-metadata">

**Author:** ![ryanjmclaughlin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ryanjmclaughlin/32/4318_2.png) [@ryanjmclaughlin](https://forum.inductiveautomation.com/u/ryanjmclaughlin)\
**Post date:** [November 23, 2020, 5:07pm UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/4 "2020-11-23T17:07:48Z")

</div>

Humm interesting, I have a few other vendors where the act of just navigating to the site is considered a request for the auth. So if the auth is not present, it just requests from the IdP without asking them to explicitly authorize it.

Interesting enough, it just noticed that the sign in action just redirects to _/data/perspective/login/{project}_ is there any “bad” in opening the project from this directly? Provided the obvious checks of the initial sign in screen will not be run?

I can understand in a public facing scenario or a site with multiple IdP options, then asking the user first would be a good idea, but in an enterprise where we shove all auth through the same IdP it seems unnecessary.

---

<div class="post-metadata">

**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\
**Post date:** [November 30, 2020, 5:48pm UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/5 "2020-11-30T17:48:04Z")

</div>

This has come up before. Unfortunately, there is no way around this “speed bump”. It is on our radar and it is something we are going to explore supporting in the future.

Do you know how are the other vendors performing the automatic login? Do they use OIDC or SAML based IdPs? When you land on the auth-protected page, is the browser immediately redirecting you to the IdP to login? Or is it doing some kind of async background call to the IdP while keeping the user on the auth-protected page in a waiting state?

You totally could link directly to `/data/perspective/login/{project}`, just know you are relying on the internal implementation details of how Ignition does the IdP redirects and while I do not see this changing any time soon, it _could_ change in the future.

---

<div class="post-metadata">

**Author:** ![ryanjmclaughlin](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ryanjmclaughlin/32/4318_2.png) [@ryanjmclaughlin](https://forum.inductiveautomation.com/u/ryanjmclaughlin)\
**Post date:** [November 30, 2020, 8:32pm UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/6 "2020-11-30T20:32:35Z")

</div>

> [@jspecht](#):
>
> Do you know how are the other vendors performing the automatic login? Do they use OIDC or SAML based IdPs? When you land on the auth-protected page, is the browser immediately redirecting you to the IdP to login? Or is it doing some kind of async background call to the IdP while keeping the user on the auth-protected page in a waiting state?

Both OIDC and SAML. I have a few apps that once the IdP is configured the act of navigating to the URL un-authenticated redirects to the IdP (you see the adress bar hop around) then you get auto-redirected back to the app). The behavior of almost all of our other applications (including Sharepoint / Office 365) is mostly this way. Never seen any async background stuff, it always happens in the foreground.

> [@jspecht](#):
>
> You totally could link directly to `/data/perspective/login/{project}` , just know you are relying on the internal implementation details of how Ignition does the IdP redirects and while I do not see this changing any time soon, it _could_ change in the future.

Very cool. I think for the most part people will still bookmark the /client but when redirecting a user from one perspective project to another its a bit more user friendly to send them to /login to make things go faster. The behavior of accessing /login is more in line with the behavior of our other apps using the same IdP.

---

<div class="post-metadata">

**Author:** ![alan.s.kinnaman](https://avatars.discourse-cdn.com/v4/letter/a/4af34b/32.png) [@alan.s.kinnaman](https://forum.inductiveautomation.com/u/alan.s.kinnaman)\
**Post date:** [January 7, 2021, 5:39pm UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/7 "2021-01-07T17:39:09Z")

</div>

I just wanted to chime in to say that our organization also uses a system that authenticates just by opening a web page, and the interstitial Ignition login button is cumbersome.

We’re deploying a system that displays information on hands-off monitors where no user interaction is available. Requiring the “Continue to Log In” button to be clicked interferes with this system.

For the time being, we’ll likely use the `/data/perspective/login/{project}` URL referenced above by @jspecht, but it sounds like that might not be a good long-term solution. Is there any update on adding the ability to disable this page?

---

<div class="post-metadata">

**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\
**Post date:** [January 7, 2021, 5:51pm UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/8 "2021-01-07T17:51:54Z")

</div>

We’ve created a proof-of-concept and (from that effort) a ticket was created for this feature’s implementation and is currently under review.

---

<div class="post-metadata">

**Author:** ![alan.s.kinnaman](https://avatars.discourse-cdn.com/v4/letter/a/4af34b/32.png) [@alan.s.kinnaman](https://forum.inductiveautomation.com/u/alan.s.kinnaman)\
**Post date:** [January 7, 2021, 7:21pm UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/9 "2021-01-07T19:21:24Z")

</div>

Great! Thanks for the update.

---

<div class="post-metadata">

**Author:** ![SBL\_MC](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sbl_mc/32/56813_2.png) [@SBL\_MC](https://forum.inductiveautomation.com/u/SBL_MC)\
**Post date:** [March 16, 2021, 8:24am UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/10 "2021-03-16T08:24:41Z")

</div>

Any news?

---

<div class="post-metadata">

**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\
**Post date:** [March 18, 2021, 12:16am UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/11 "2021-03-18T00:16:20Z")

</div>

A developer is currently working on this feature’s implementation

---

<div class="post-metadata">

**Author:** ![mark.talaese](https://avatars.discourse-cdn.com/v4/letter/m/edb3f5/32.png) [@mark.talaese](https://forum.inductiveautomation.com/u/mark.talaese)\
**Post date:** [April 15, 2021, 12:30am UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/12 "2021-04-15T00:30:17Z")

</div>

Is there a rough eta for the implementation?

---

<div class="post-metadata">

**Author:** ![SBL\_MC](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sbl_mc/32/56813_2.png) [@SBL\_MC](https://forum.inductiveautomation.com/u/SBL_MC)\
**Post date:** [May 4, 2021, 6:07pm UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/13 "2021-05-04T18:07:15Z")

</div>

I see there are news regarding the IdP in 8.1.5, has this request been included?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [May 4, 2021, 6:18pm UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/14 "2021-05-04T18:18:01Z")

</div>

It’s still in development.

---

<div class="post-metadata">

**Author:** ![SBL\_MC](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sbl_mc/32/56813_2.png) [@SBL\_MC](https://forum.inductiveautomation.com/u/SBL_MC)\
**Post date:** [May 18, 2021, 7:56am UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/15 "2021-05-18T07:56:29Z")

</div>

Any ETA availible?

---

<div class="post-metadata">

**Author:** ![SBL\_MC](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sbl_mc/32/56813_2.png) [@SBL\_MC](https://forum.inductiveautomation.com/u/SBL_MC)\
**Post date:** [June 25, 2021, 6:44am UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/16 "2021-06-25T06:44:55Z")

</div>

Any news on this topic?

---

<div class="post-metadata">

**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\
**Post date:** [June 25, 2021, 3:25pm UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/17 "2021-06-25T15:25:00Z")

</div>

Yes - this feature was merged into 8.1.8 earlier this month:

> [@Nightly 8.1 Changelogs - 2021](http://forum.inductiveautomation.com/t/nightly-8-1-changelogs-2021/42410/95):
>
> Nightly Changelog: 8.1.8-b20210604 Visualization 705: Edge Plugins page displaying incorrect and outdated information Updated the Edge Overview page to better reflect activated plugins when license is applied. 2656: In Vision 8.1.5, Property Bindings on Grouped Components Persist After the Grouping is Removed, Resulting in Null Pointer Exceptions and an Undeletable Component Fixed issue that left orphaned bindings in place when un-grouping a group with bindings on it. 2471: Perspective Rou…

---

<div class="post-metadata">

**Author:** ![SBL\_MC](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sbl_mc/32/56813_2.png) [@SBL\_MC](https://forum.inductiveautomation.com/u/SBL_MC)\
**Post date:** [June 28, 2021, 9:36am UTC](https://forum.inductiveautomation.com/t/feature-1402-perspective-autologin-idp/40221/18 "2021-06-28T09:36:21Z")

</div>

Works very well, thanks!
