# Importing Users From an Identity Provider

**URL:** <https://forum.inductiveautomation.com/t/importing-users-from-an-identity-provider/65087>\
**Category:** Ignition\
**Tags:** ignition81\
**Created:** [October 11, 2022, 8:23pm UTC](https://forum.inductiveautomation.com/t/importing-users-from-an-identity-provider/65087 "2022-10-11T20:23:52Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Justin\_Szatkowski](https://avatars.discourse-cdn.com/v4/letter/j/c6cbf5/32.png) [@Justin\_Szatkowski](https://forum.inductiveautomation.com/u/Justin_Szatkowski)\
**Post date:** [October 11, 2022, 8:23pm UTC](https://forum.inductiveautomation.com/t/importing-users-from-an-identity-provider/65087/1 "2022-10-11T20:23:52Z")

</div>

Hello,

I am building an application for a client who requires third party (Okta) identification. The client wishes to be able to add/delete users via their Okta account and have it propagate to Ignition. Is there a way to import Okta users and have them as a User Source within Ignition?

Thank you.

---

<div class="post-metadata">

**Author:** ![wildbilly](https://avatars.discourse-cdn.com/v4/letter/w/e19adc/32.png) [@wildbilly](https://forum.inductiveautomation.com/u/wildbilly)\
**Post date:** [October 11, 2022, 8:26pm UTC](https://forum.inductiveautomation.com/t/importing-users-from-an-identity-provider/65087/2 "2022-10-11T20:26:41Z")

</div>

you have to use SAML or Open Connect

[https://docs.inductiveautomation.com/display/DOC81/SAML+Example](https://docs.inductiveautomation.com/display/DOC81/SAML+Example)

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [October 11, 2022, 8:44pm UTC](https://forum.inductiveautomation.com/t/importing-users-from-an-identity-provider/65087/3 "2022-10-11T20:44:48Z")

</div>

Put another way - you shouldn't "import" users into Ignition. User sources are a 'legacy' concept and not really needed. If you've already got an external identity provider you want to use for authentication...you should just use for authentication.

---

<div class="post-metadata">

**Author:** ![Justin\_Szatkowski](https://avatars.discourse-cdn.com/v4/letter/j/c6cbf5/32.png) [@Justin\_Szatkowski](https://forum.inductiveautomation.com/u/Justin_Szatkowski)\
**Post date:** [October 12, 2022, 12:52pm UTC](https://forum.inductiveautomation.com/t/importing-users-from-an-identity-provider/65087/4 "2022-10-12T12:52:39Z")

</div>

> [@paul-griffith](#):
>
> identity provider you want to use for authentication...you should just use for authentication.

This is true - however I need to assign certain roles/access based on the user coming from Okta. Is this possible?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [October 12, 2022, 1:25pm UTC](https://forum.inductiveautomation.com/t/importing-users-from-an-identity-provider/65087/5 "2022-10-12T13:25:17Z")

</div>

You would configure an attribute mapping that extracted user roles from attribute data returned by the IdP: [User Attribute Mapping - Ignition User Manual 8.1 - Ignition Documentation](https://docs.inductiveautomation.com/display/DOC81/User+Attribute+Mapping)