# Login When Active Directory Unreachable

**URL:** <https://forum.inductiveautomation.com/t/login-when-active-directory-unreachable/65875>\
**Category:** Ignition\
**Created:** [October 31, 2022, 2:20pm UTC](https://forum.inductiveautomation.com/t/login-when-active-directory-unreachable/65875 "2022-10-31T14:20:39Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [October 31, 2022, 2:41pm UTC](https://forum.inductiveautomation.com/t/login-when-active-directory-unreachable/65875/2 "2022-10-31T14:41:50Z")

</div>

I don't know anything about the cache but I highly recommend that you use a soft failover to the default user source and leave the administrator user (or another) that can be used if the AD user source fails. The administrator password should, of course, be kept secret.

Config | Security | Users, Roles | Edit …  
Failover Source = default.  
Failover Mode = soft.

> [@tnichols](#):
>
> I then give my users the credentials for the backup user in the event AD is unreachable.

You could do that, creating a set of emergency users - one per role, perhaps. The problem here is that those logins will let anyone with the password in at any time unless you enable / disable them on the gateway.

---

_[View the full topic](https://forum.inductiveautomation.com/t/login-when-active-directory-unreachable/65875)._