# \[IGN-2654\] Gateway Multi Factor Authentication

**URL:** <https://forum.inductiveautomation.com/t/ign-2654-gateway-multi-factor-authentication/50142>\
**Category:** Ignition\
**Created:** [August 20, 2021, 2:55pm UTC](https://forum.inductiveautomation.com/t/ign-2654-gateway-multi-factor-authentication/50142 "2021-08-20T14:55:58Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![John](https://avatars.discourse-cdn.com/v4/letter/j/a3d4f5/32.png) [@John](https://forum.inductiveautomation.com/u/John)\
**Post date:** [August 20, 2021, 2:55pm UTC](https://forum.inductiveautomation.com/t/ign-2654-gateway-multi-factor-authentication/50142/1 "2021-08-20T14:55:58Z")

</div>

Is there any way to have multi factor authentication for gateway?

If not, any other way to secure the gateway when that server has a public IP address?  
Other than the Ignition login with the proper roles to access the gateway.

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [August 20, 2021, 2:59pm UTC](https://forum.inductiveautomation.com/t/ign-2654-gateway-multi-factor-authentication/50142/2 "2021-08-20T14:59:12Z")

</div>

As of Ignition 8.1 you can use a third-party identity provider for gateway authentication. Many third party IdPs allow you to require 2FA.

We may eventually add support first-party, but no timeline on that.

---

<div class="post-metadata">

**Author:** ![John](https://avatars.discourse-cdn.com/v4/letter/j/a3d4f5/32.png) [@John](https://forum.inductiveautomation.com/u/John)\
**Post date:** [August 20, 2021, 3:43pm UTC](https://forum.inductiveautomation.com/t/ign-2654-gateway-multi-factor-authentication/50142/3 "2021-08-20T15:43:08Z")

</div>

We are planning on using Igniton as the user source and identity provider so we wouldn’t have to pay for anything extra.

That said, if there is a free source out there for this or a very low cost one the that’s something we would consider. This will only be used for gateway authentication and only a few (less than 5) will need to get into the gateway web page.

---

<div class="post-metadata">

**Author:** ![John](https://avatars.discourse-cdn.com/v4/letter/j/a3d4f5/32.png) [@John](https://forum.inductiveautomation.com/u/John)\
**Post date:** [August 20, 2021, 9:01pm UTC](https://forum.inductiveautomation.com/t/ign-2654-gateway-multi-factor-authentication/50142/4 "2021-08-20T21:01:37Z")

</div>

To confirm, you can have the gateway and designer login use an external identity provider, then the perspective sessions could then use the ignition user source as the identity provider?

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [August 20, 2021, 9:02pm UTC](https://forum.inductiveautomation.com/t/ign-2654-gateway-multi-factor-authentication/50142/5 "2021-08-20T21:02:51Z")

</div>

Correct, there’s a ‘System’ user source property that’s used for the gateway and designer, then each project can independently use a particular identity provider.

---

<div class="post-metadata">

**Author:** ![John](https://avatars.discourse-cdn.com/v4/letter/j/a3d4f5/32.png) [@John](https://forum.inductiveautomation.com/u/John)\
**Post date:** [August 24, 2021, 3:35pm UTC](https://forum.inductiveautomation.com/t/ign-2654-gateway-multi-factor-authentication/50142/6 "2021-08-24T15:35:09Z")

</div>

What does the [IGN-2654] mean exactly?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [August 24, 2021, 3:36pm UTC](https://forum.inductiveautomation.com/t/ign-2654-gateway-multi-factor-authentication/50142/7 "2021-08-24T15:36:41Z")

</div>

It’s a reference to the issue number in our internal system.

---

<div class="post-metadata">

**Author:** ![John](https://avatars.discourse-cdn.com/v4/letter/j/a3d4f5/32.png) [@John](https://forum.inductiveautomation.com/u/John)\
**Post date:** [August 24, 2021, 3:48pm UTC](https://forum.inductiveautomation.com/t/ign-2654-gateway-multi-factor-authentication/50142/8 "2021-08-24T15:48:09Z")

</div>

If that capability is not there, wouldn’t it be a new feature request, not a issue?

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [August 24, 2021, 3:49pm UTC](https://forum.inductiveautomation.com/t/ign-2654-gateway-multi-factor-authentication/50142/9 "2021-08-24T15:49:07Z")

</div>

It’s all the same ‘issue tracker’, whether it’s a bug, feature, refactor, etc. It’s just an internal detail for us so we don’t lose track of this thread registering demand for the feature.

---

<div class="post-metadata">

**Author:** ![John](https://avatars.discourse-cdn.com/v4/letter/j/a3d4f5/32.png) [@John](https://forum.inductiveautomation.com/u/John)\
**Post date:** [August 24, 2021, 4:05pm UTC](https://forum.inductiveautomation.com/t/ign-2654-gateway-multi-factor-authentication/50142/10 "2021-08-24T16:05:22Z")

</div>

Can it be found here [https://ideas.inductiveautomation.com/ignition-features-and-ideas?sort=new](https://ideas.inductiveautomation.com/ignition-features-and-ideas?sort=new)  
?

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [August 24, 2021, 4:10pm UTC](https://forum.inductiveautomation.com/t/ign-2654-gateway-multi-factor-authentication/50142/11 "2021-08-24T16:10:05Z")

</div>

No, that’s yet another tracker. We have one ‘main’ internal-only system with no public view. All actual work we do is based on that tracker. The forum and the ideas portal are separate; we manually set up links between internal issues and forum/ideas threads.
