# Ignition AD Hybrid Internal Authentification

**URL:** <https://forum.inductiveautomation.com/t/ignition-ad-hybrid-internal-authentification/100593>\
**Category:** Ignition\
**Created:** [January 8, 2025, 2:57pm UTC](https://forum.inductiveautomation.com/t/ignition-ad-hybrid-internal-authentification/100593 "2025-01-08T14:57:51Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ichraf\_ZAIDI](https://avatars.discourse-cdn.com/v4/letter/i/7ab992/32.png) [@Ichraf\_ZAIDI](https://forum.inductiveautomation.com/u/Ichraf_ZAIDI)\
**Post date:** [January 8, 2025, 2:57pm UTC](https://forum.inductiveautomation.com/t/ignition-ad-hybrid-internal-authentification/100593/1 "2025-01-08T14:57:51Z")

</div>

I find a problem applying hybrid internal AD authentication. In fact, the configuration is well done and I received the complete list of users defined in the company's AD. Afterwards I put the system user source in the name of the new AD user source. I even gave some users the administrator role, but I still can't log in with any of these users. Is there another step to do?

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [January 8, 2025, 3:28pm UTC](https://forum.inductiveautomation.com/t/ignition-ad-hybrid-internal-authentification/100593/2 "2025-01-08T15:28:13Z")

</div>

Where did you assign the role? (Hybrid doesn't use roles from AD--only roles explicitly assigned in Ignition.)

---

<div class="post-metadata">

**Author:** ![Ichraf\_ZAIDI](https://avatars.discourse-cdn.com/v4/letter/i/7ab992/32.png) [@Ichraf\_ZAIDI](https://forum.inductiveautomation.com/u/Ichraf_ZAIDI)\
**Post date:** [January 8, 2025, 3:34pm UTC](https://forum.inductiveautomation.com/t/ignition-ad-hybrid-internal-authentification/100593/3 "2025-01-08T15:34:28Z")

</div>

I assigned the role in Ignition (I edited the user that is in the list)

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [January 8, 2025, 5:15pm UTC](https://forum.inductiveautomation.com/t/ignition-ad-hybrid-internal-authentification/100593/4 "2025-01-08T17:15:41Z")

</div>

Hmmm. Out of ideas. Neither I nor my clients use the hybrid. (Mostly full AD with soft fallback to internal.)