# Identity Provider and User Source

**URL:** <https://forum.inductiveautomation.com/t/identity-provider-and-user-source/69399>\
**Category:** Ignition\
**Tags:** ignition81\
**Created:** [February 3, 2023, 11:50am UTC](https://forum.inductiveautomation.com/t/identity-provider-and-user-source/69399 "2023-02-03T11:50:53Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ISEMAREN\_AAG](https://avatars.discourse-cdn.com/v4/letter/i/82dd89/32.png) [@ISEMAREN\_AAG](https://forum.inductiveautomation.com/u/ISEMAREN_AAG)\
**Post date:** [February 3, 2023, 11:50am UTC](https://forum.inductiveautomation.com/t/identity-provider-and-user-source/69399/1 "2023-02-03T11:50:53Z")

</div>

Good morning.  
When an **Identity Provider** is configured, a **User Source must be assigned to it**. But in the project properties the User Source can be changed. So, why is a User Source assigned to an Identity Provider?

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/0/9/0938ee98a90f5b6465d02a26521af2f539fc9519.png)

Best Regards.

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [February 3, 2023, 4:27pm UTC](https://forum.inductiveautomation.com/t/identity-provider-and-user-source/69399/2 "2023-02-03T16:27:18Z")

</div>

Vision can be set to use _either_ the project IdP or the project user source for authentication.  
Perspective requires the IdP be used.  
We probably could/should hide the user source setting if you don't have Vision installed, but there's an argument that settings being sometimes invisible is also confusing.

Separate from the project properties, Ignition's internal IdP implementation _delegates_ to a user source, because user sources were around for much longer than Perspective and IdP integration in Ignition, so lots of customers already had user sources set up. However, there's no requirement that you use **Ignition's** identity provider; you can also hook up a third party IdP which has its own repository of users and authorizations.