# \[FEATURE\]Manage Passwords Between Gateways

**URL:** <https://forum.inductiveautomation.com/t/feature-manage-passwords-between-gateways/94313>\
**Category:** Ignition\
**Tags:** ignition81\
**Created:** [August 7, 2024, 6:46pm UTC](https://forum.inductiveautomation.com/t/feature-manage-passwords-between-gateways/94313 "2024-08-07T18:46:01Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![amarks](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/amarks/32/45610_2.png) [@amarks](https://forum.inductiveautomation.com/u/amarks)\
**Post date:** [August 7, 2024, 6:46pm UTC](https://forum.inductiveautomation.com/t/feature-manage-passwords-between-gateways/94313/1 "2024-08-07T18:46:01Z")

</div>

I have a total of 6 gateways (1 Ignition, 5 Edge Panel) that each have an internal-type user source. Ideally, these gateways would share a single user source so that changing a password on one of the gateways changes it for all gateways. How can I accomplish this?

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [August 7, 2024, 6:48pm UTC](https://forum.inductiveautomation.com/t/feature-manage-passwords-between-gateways/94313/2 "2024-08-07T18:48:56Z")

</div>

The only way I can think is to set the standard Ignition instance up as the IdP for the others.

---

<div class="post-metadata">

**Author:** ![amarks](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/amarks/32/45610_2.png) [@amarks](https://forum.inductiveautomation.com/u/amarks)\
**Post date:** [August 7, 2024, 6:49pm UTC](https://forum.inductiveautomation.com/t/feature-manage-passwords-between-gateways/94313/3 "2024-08-07T18:49:33Z")

</div>

How does that work if connection to the standard Ignition gateway is lost?

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [August 7, 2024, 6:51pm UTC](https://forum.inductiveautomation.com/t/feature-manage-passwords-between-gateways/94313/4 "2024-08-07T18:51:40Z")

</div>

You're toast, except where already logged in. If you are sharing a resource (user credentials, in this case), that resource must be always available. 🤷‍♂️

Choose your priorities.

---

<div class="post-metadata">

**Author:** ![JordanCClark](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jordancclark/32/83362_2.png) [@JordanCClark](https://forum.inductiveautomation.com/u/JordanCClark)\
**Post date:** [August 7, 2024, 6:55pm UTC](https://forum.inductiveautomation.com/t/feature-manage-passwords-between-gateways/94313/5 "2024-08-07T18:55:59Z")

</div>

We use a DB user source for this.

---

<div class="post-metadata">

**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\
**Post date:** [August 7, 2024, 6:57pm UTC](https://forum.inductiveautomation.com/t/feature-manage-passwords-between-gateways/94313/6 "2024-08-07T18:57:33Z")

</div>

So, I'd have to look if it was actually ever done, but a customer of mine was trying to implement something like this themselves. They have standalone Edge HMIs scattered out in the middle of nowhere, and they were wanting to set up a standard set of logins for those units. They were going to have a separate database where they were going to manage users by adding records to a database (users and roles) and encrypting the passwords with a pre-set key on the server, then put those records in JSON (I think) and send them back over MQTT to the edge instances where a tag change event would trigger a script to add/update/delete users automatically on the edge systems. I don't know if it was ever finished or even tested, but making me curious to want to see now.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [August 7, 2024, 6:58pm UTC](https://forum.inductiveautomation.com/t/feature-manage-passwords-between-gateways/94313/7 "2024-08-07T18:58:29Z")

</div>

> [@JordanCClark](#):
>
> DB user source for this.

Not available for Edge.

---

<div class="post-metadata">

**Author:** ![JordanCClark](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jordancclark/32/83362_2.png) [@JordanCClark](https://forum.inductiveautomation.com/u/JordanCClark)\
**Post date:** [August 7, 2024, 6:58pm UTC](https://forum.inductiveautomation.com/t/feature-manage-passwords-between-gateways/94313/8 "2024-08-07T18:58:50Z")

</div>

Yeah, just saw that.

---

<div class="post-metadata">

**Author:** ![amarks](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/amarks/32/45610_2.png) [@amarks](https://forum.inductiveautomation.com/u/amarks)\
**Post date:** [August 7, 2024, 10:14pm UTC](https://forum.inductiveautomation.com/t/feature-manage-passwords-between-gateways/94313/9 "2024-08-07T22:14:42Z")

</div>

Seems odd to me that something like this is missing, especially with EAM available. Perhaps this should be a [feature request](https://inductiveautomation.canny.io/ignition-features-and-ideas/p/share-user-sources-between-gateways).

---

<div class="post-metadata">

**Author:** ![JordanCClark](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jordancclark/32/83362_2.png) [@JordanCClark](https://forum.inductiveautomation.com/u/JordanCClark)\
**Post date:** [August 8, 2024, 11:26am UTC](https://forum.inductiveautomation.com/t/feature-manage-passwords-between-gateways/94313/10 "2024-08-08T11:26:52Z")

</div>

You should probably put a link in the feature request back to this thread to provide context.

---

<div class="post-metadata">

**Author:** ![amarks](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/amarks/32/45610_2.png) [@amarks](https://forum.inductiveautomation.com/u/amarks)\
**Post date:** [August 20, 2024, 1:25pm UTC](https://forum.inductiveautomation.com/t/feature-manage-passwords-between-gateways/94313/11 "2024-08-20T13:25:29Z")

</div>

It's above

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [August 20, 2024, 1:40pm UTC](https://forum.inductiveautomation.com/t/feature-manage-passwords-between-gateways/94313/12 "2024-08-20T13:40:23Z")

</div>

There's no link in the feature request back to this forum topic. There should be.

---

<div class="post-metadata">

**Author:** ![amarks](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/amarks/32/45610_2.png) [@amarks](https://forum.inductiveautomation.com/u/amarks)\
**Post date:** [August 20, 2024, 6:11pm UTC](https://forum.inductiveautomation.com/t/feature-manage-passwords-between-gateways/94313/13 "2024-08-20T18:11:47Z")

</div>

Ah, got it
