# Gateway Authentication when IdP is failing

**URL:** <https://forum.inductiveautomation.com/t/gateway-authentication-when-idp-is-failing/100488>\
**Category:** Ignition\
**Tags:** ignition81, perspective\
**Created:** [January 6, 2025, 6:05pm UTC](https://forum.inductiveautomation.com/t/gateway-authentication-when-idp-is-failing/100488 "2025-01-06T18:05:00Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Michael\_White](https://avatars.discourse-cdn.com/v4/letter/m/c6cbf5/32.png) [@Michael\_White](https://forum.inductiveautomation.com/u/Michael_White)\
**Post date:** [January 6, 2025, 6:05pm UTC](https://forum.inductiveautomation.com/t/gateway-authentication-when-idp-is-failing/100488/1 "2025-01-06T18:05:00Z")

</div>

We are looking to use our SSO IdP (Auth0) that we use for our customer facing Perspective project as our authentication for the gateway as well.

Setting it up to authenticate was fairly simple. However, I have one question.

When Auth0 is down/inaccessible, how would we be able to login to the gateway during that time? Can we set some sort of failover? I only see a failover option for User Source, not IdP.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [January 6, 2025, 7:39pm UTC](https://forum.inductiveautomation.com/t/gateway-authentication-when-idp-is-failing/100488/2 "2025-01-06T19:39:15Z")

</div>

No. IdP themselves cannot do failover. Ignition's built-in IdP gives the appearance of failover support because it delegates to a user source, and that user source can do failover.

I recommend you **not** use any non-local IdP for gateway configuration auth.

---

<div class="post-metadata">

**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\
**Post date:** [January 7, 2025, 4:34am UTC](https://forum.inductiveautomation.com/t/gateway-authentication-when-idp-is-failing/100488/3 "2025-01-07T04:34:54Z")

</div>

Had a client so this with Azure AD. They forgot to renew the token. No one could log into the client or the designer/web configuration. Had to go into the console and do a password reset to get them back in to set up the new token and get it running again. They were freaking out and didn't know why until we looked at the logs after we got back in.