# Ignition 8.3 User Authentication & Upgrade **URL:** \ **Category:** General Discussion\ **Tags:** vision\ **Created:** [March 10, 2025, 9:26am UTC](https://forum.inductiveautomation.com/t/ignition-8-3-user-authentication-upgrade/103437 "2025-03-10T09:26:00Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![patryk.labuzek](https://avatars.discourse-cdn.com/v4/letter/p/ce7236/32.png) [@patryk.labuzek](https://forum.inductiveautomation.com/u/patryk.labuzek)\ **Post date:** [March 10, 2025, 9:26am UTC](https://forum.inductiveautomation.com/t/ignition-8-3-user-authentication-upgrade/103437/1 "2025-03-10T09:26:00Z")
Hi all, Reaching out with questions I have and can't seem to find the answer to on the online Ignition resources. Firstly, will there be any updates in Ignition 8.3 regarding user authentication through Active Directory? What really interests us is being able to display Password Expiry information inside Ignition Vision and the functionality to change and reset passwords on the Active Directory. Secondly, once Ignition 8.3 is released what is the upgrade process from Ignition 8.1.38? Will new licenses be required? ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [March 10, 2025, 12:26pm UTC](https://forum.inductiveautomation.com/t/ignition-8-3-user-authentication-upgrade/103437/2 "2025-03-10T12:26:51Z")
1. I haven't seen any changes in authentication. I wouldn't expect to **ever** be able to reset AD passwords from Ignition. 2. If you have current support for your existing license, an upgraded license is free. Otherwise, you must pay for re-instatement. ---
**Author:** ![michael.flagler](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/michael.flagler/32/26272_2.png) [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\ **Post date:** [March 10, 2025, 1:45pm UTC](https://forum.inductiveautomation.com/t/ignition-8-3-user-authentication-upgrade/103437/3 "2025-03-10T13:45:33Z")
I think the only change I heard about with regard to AD is that nested groups may work. Right now only groups that a user is a direct member of are used, but no groups that are members of other groups. (and I could be completely wrong on this, but I keep thinking I heard a discussion about this in a breakout room at ICC). ---
**Author:** ![jspecht](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/jspecht/32/6465_2.png) [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\ **Post date:** [March 10, 2025, 7:09pm UTC](https://forum.inductiveautomation.com/t/ignition-8-3-user-authentication-upgrade/103437/4 "2025-03-10T19:09:11Z")
@michael.flagler is correct - we'll have nested AD group support in 8.3. We are also introducing the ability to map arbitrary attributes from the user entry in AD over into a property on the user object in Ignition. @patryk.labuzek - we have no plans for first class support of password expiration capabilities with the AD user source. The AD user sources interact with AD in a read-only way. If you have any ideas for new features, please submit them to the [Ideas Portal](https://inductiveautomation.canny.io/). The above two enhancements were prioritized because of overwhelming demand in part thanks to the below ideas portal requests: - [Enhance Active Directory User Source to support nested groups | Voters | Inductive Automation](https://inductiveautomation.canny.io/ignition-features-and-ideas/p/enhance-active-directory-user-source-to-support-nested-groups) - [Allow custom attributes to be pulled from the AD user source | Voters | Inductive Automation](https://ideas.inductiveautomation.com/ignition-features-and-ideas/p/allow-custom-attributes-to-be-pulled-from-the-ad-user-source)