# Get Badge/EmployeeID/Employee number from AD for badge logins

**URL:** <https://forum.inductiveautomation.com/t/get-badge-employeeid-employee-number-from-ad-for-badge-logins/79864>\
**Category:** Ignition\
**Created:** [September 29, 2023, 6:50pm UTC](https://forum.inductiveautomation.com/t/get-badge-employeeid-employee-number-from-ad-for-badge-logins/79864 "2023-09-29T18:50:15Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![Newbie10](https://avatars.discourse-cdn.com/v4/letter/n/a698b9/32.png) [@Newbie10](https://forum.inductiveautomation.com/u/Newbie10)\
**Post date:** [September 29, 2023, 6:50pm UTC](https://forum.inductiveautomation.com/t/get-badge-employeeid-employee-number-from-ad-for-badge-logins/79864/1 "2023-09-29T18:50:15Z")

</div>

I am trying to use an employeeID in AD to be used for the badge attribute fields so we can have users login with their badges. I am able to populate the users on the domain controller, but I am having difficulty getting the badge number from this attribute/field. Any help on this would be beneficial. Thanks

---

<div class="post-metadata">

**Author:** ![Ben\_Eklund](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ben_eklund/32/40758_2.png) [@Ben\_Eklund](https://forum.inductiveautomation.com/u/Ben_Eklund)\
**Post date:** [October 2, 2023, 9:35pm UTC](https://forum.inductiveautomation.com/t/get-badge-employeeid-employee-number-from-ad-for-badge-logins/79864/2 "2023-10-02T21:35:30Z")

</div>

You may be able to try using a test login to see if badge number is returned by your Identity Provider. Here is our documentation on test login: [Test Login and Logout - Ignition User Manual 8.1 - Ignition Documentation](https://docs.inductiveautomation.com/display/DOC81/Test+Login+and+Logout).

This is an example IdP response from a test login:

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/2/6/26d8ea82304cc6aa0fb022cce12d90dddfdc1e9a.png)

---

<div class="post-metadata">

**Author:** ![Newbie10](https://avatars.discourse-cdn.com/v4/letter/n/a698b9/32.png) [@Newbie10](https://forum.inductiveautomation.com/u/Newbie10)\
**Post date:** [October 3, 2023, 1:55pm UTC](https://forum.inductiveautomation.com/t/get-badge-employeeid-employee-number-from-ad-for-badge-logins/79864/3 "2023-10-03T13:55:46Z")

</div>

Yes I saw this, but it never shows me the badge number. Does Ignition not let the badge number be shown when testing a login? Does Ignition only compare the string/int associated with the corresponding 'badgeID' attribute??

Also, Does it matter which attribute in AD I use?

I can get everything else except the attribute I use for the badge number which is 'employeeID' or even 'employeeNumber' in AD.

I am able to use the badge id with the internal user source, just no luck with the AD.

Am I missing something?

Any help would be appreciated.

![ad_user](https://us1.discourse-cdn.com/inductiveautomation/original/3X/5/1/517e70624da888e8a6135aa48b55e071836b66bb.png)

---

<div class="post-metadata">

**Author:** ![Newbie10](https://avatars.discourse-cdn.com/v4/letter/n/a698b9/32.png) [@Newbie10](https://forum.inductiveautomation.com/u/Newbie10)\
**Post date:** [October 3, 2023, 3:24pm UTC](https://forum.inductiveautomation.com/t/get-badge-employeeid-employee-number-from-ad-for-badge-logins/79864/4 "2023-10-03T15:24:50Z")

</div>

I was finally able to figure out why I couldn't use a badge to login. I missed have the (&(objectClass=user)("Attributebeingused"={0})). I had "Attributebeingused" to "badge", which was wrong.

Also, is there anyway to update a users "badge" field if I was going to use a hybrid or internal data source by incorporating a gateway script on a page in a client window??

EX. push a button, ask for a user name that is in a user source, and use the badge reader to change the 'badge' attribute inside that users properties??

---

<div class="post-metadata">

**Author:** ![Ben\_Eklund](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ben_eklund/32/40758_2.png) [@Ben\_Eklund](https://forum.inductiveautomation.com/u/Ben_Eklund)\
**Post date:** [October 4, 2023, 9:12pm UTC](https://forum.inductiveautomation.com/t/get-badge-employeeid-employee-number-from-ad-for-badge-logins/79864/5 "2023-10-04T21:12:37Z")

</div>

Active Directory users are managed by the Active Directory Server itself, even when using an AD/Internal, or AD/Database hybrid. The Internal and Database hybrid part is able to handle roles, and contact information, but I do not believe it contains any response data we can update such as the badge field.

[From the doc:](https://docs.inductiveautomation.com/display/DOC81/AD+Database+Hybrid)

> This AD/Database Hybrid User Source is not [manageable](https://docs.inductiveautomation.com/display/DOC81/Security) from within Ignition. Users/passwords must be administered through [Active Directory](https://docs.inductiveautomation.com/display/DOC81/Active+Directory+Authentication), and roles, contact info, and so on, must be administered directly through the database

---

<div class="post-metadata">

**Author:** ![Newbie10](https://avatars.discourse-cdn.com/v4/letter/n/a698b9/32.png) [@Newbie10](https://forum.inductiveautomation.com/u/Newbie10)\
**Post date:** [October 12, 2023, 12:02am UTC](https://forum.inductiveautomation.com/t/get-badge-employeeid-employee-number-from-ad-for-badge-logins/79864/6 "2023-10-12T00:02:31Z")

</div>

"The Internal and Database hybrid part is able to handle roles, and contact information, but I do not believe it contains any response data we can update such as the badge field."

Is there potential or headway in order to update this badge field inside a hybrid source via gateway script from the client window? If we can update roles and other information why can't the badge field also be updated??

This would be fantastic, and would better Ignition if we can do this!

Let me know! Thanks.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [October 12, 2023, 2:59am UTC](https://forum.inductiveautomation.com/t/get-badge-employeeid-employee-number-from-ad-for-badge-logins/79864/7 "2023-10-12T02:59:34Z")

</div>

User authentication, including badge info, is governed by AD when AD is used. You have to manage it in AD, not Ignition.

---

<div class="post-metadata">

**Author:** ![Marco\_Keller](https://avatars.discourse-cdn.com/v4/letter/m/b19c9b/32.png) [@Marco\_Keller](https://forum.inductiveautomation.com/u/Marco_Keller)\
**Post date:** [August 14, 2025, 2:13pm UTC](https://forum.inductiveautomation.com/t/get-badge-employeeid-employee-number-from-ad-for-badge-logins/79864/8 "2025-08-14T14:13:17Z")

</div>

A customer wants to use badge authentication in combination with Active Directory.  
What needs to be configured in AD for this to work? Are there instructions for this?
