# How to Login as Active Directory User on Ignition? **URL:** \ **Category:** Ignition\ **Created:** [November 7, 2023, 5:10pm UTC](https://forum.inductiveautomation.com/t/how-to-login-as-active-directory-user-on-ignition/81608 "2023-11-07T17:10:51Z")\ **Posts on this page:** 1\ **Showing post:** 5
**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\ **Post date:** [November 7, 2023, 6:38pm UTC](https://forum.inductiveautomation.com/t/how-to-login-as-active-directory-user-on-ignition/81608/5 "2023-11-07T18:38:03Z")
No, you can use AD integration for gateway login too. As per my previous post, use the AD Ignition Hybrid and create an Administrator role in that spelt exactly the same as "Administrator" in the default database. Anyone assigned that role can log in as an administrator using their AD credentials and you can keep the default Administrator password secret for emergencies or when the AD connection breaks. More: > [@Login When Active Directory Unreachable](https://forum.inductiveautomation.com/t/login-when-active-directory-unreachable/65875/2): > > I don't know anything about the cache but I highly recommend that you use a soft failover to the default user source and leave the administrator user (or another) that can be used if the AD user source fails. The administrator password should, of course, be kept secret. Config | Security | Users, Roles | Edit … Failover Source = default. Failover Mode = soft. You could do that, creating a set of emergency users - one per role, perhaps. The problem here is that those logins will let anyone w… --- _[View the full topic](https://forum.inductiveautomation.com/t/how-to-login-as-active-directory-user-on-ignition/81608)._