# Login with Identity Provider that uses AD/Database Hybrid User Source **URL:** \ **Category:** Ignition\ **Created:** [October 30, 2019, 8:08pm UTC](https://forum.inductiveautomation.com/t/login-with-identity-provider-that-uses-ad-database-hybrid-user-source/29542 "2019-10-30T20:08:57Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![Jonathan](https://avatars.discourse-cdn.com/v4/letter/j/aeb1de/32.png) [@Jonathan](https://forum.inductiveautomation.com/u/Jonathan)\ **Post date:** [October 30, 2019, 8:08pm UTC](https://forum.inductiveautomation.com/t/login-with-identity-provider-that-uses-ad-database-hybrid-user-source/29542/1 "2019-10-30T20:08:57Z")
I am trying to login to a Perspective project that is setup with an identity provider that uses an AD/Database Hybrid user source. My first problem is after I enter my username/password the browser just sits there processing the request. If I stop the browser and click refresh it will go into my project. My second issue is that I have the AD/Database Hybrid user source setup for SSO, but the project is prompting for my username and password even when I am on a domain computer. ---
**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\ **Post date:** [October 30, 2019, 8:51pm UTC](https://forum.inductiveautomation.com/t/login-with-identity-provider-that-uses-ad-database-hybrid-user-source/29542/2 "2019-10-30T20:51:33Z")
I can’t offer much advice for the first problem (check the gateway logs, there may be something useful logged there), but as for the latter - SSO doesn’t work like that in a browser based security context. SSO using web browsers requires using an identity provider that accepts you’re already logged in, which Ignition’s does not. Look into [ADFS](https://en.wikipedia.org/wiki/Active_Directory_Federation_Services) for the “proper” way to use SSO with Active Directory from a browser. ---
**Author:** ![andor.izsak](https://avatars.discourse-cdn.com/v4/letter/a/ee59a6/32.png) [@andor.izsak](https://forum.inductiveautomation.com/u/andor.izsak)\ **Post date:** [October 30, 2019, 9:36pm UTC](https://forum.inductiveautomation.com/t/login-with-identity-provider-that-uses-ad-database-hybrid-user-source/29542/3 "2019-10-30T21:36:26Z")
How many users are in your AD? If more than a few hundred…Unchek this and add the user in the AD/Hybrid source on the gateway instead. ![image](https://us1.discourse-cdn.com/inductiveautomation/original/2X/2/22732f95156a92cd61e7bacb29f08637971653eb.png) on #2 your id provider is not working at all. SSO setup is difficult to impossible without your IT groups involvement. ---
**Author:** ![tyrel.parker](https://avatars.discourse-cdn.com/v4/letter/t/47e85d/32.png) [@tyrel.parker](https://forum.inductiveautomation.com/u/tyrel.parker)\ **Post date:** [November 5, 2019, 5:32pm UTC](https://forum.inductiveautomation.com/t/login-with-identity-provider-that-uses-ad-database-hybrid-user-source/29542/4 "2019-11-05T17:32:33Z")
We do this, and it’s not painfully hard to setup unless you don’t read the documentation in its entirety. I should know. We ended up using Azure and My Apps to solve SSO. You should check out the following: [https://docs.inductiveautomation.com/display/DOC80/Identity+Providers#IdentityProviders-UsingIdentityProviders](https://protect-us.mimecast.com/s/Rs7xCmZNo7IzQY5TGvlxt) [https://docs.inductiveautomation.com/display/DOC80/User+Attribute+Mapping](https://protect-us.mimecast.com/s/uNrOCn56pGTvRLGIJeFxw) [https://docs.inductiveautomation.com/display/DOC80/Test+Login+and+Logout](https://protect-us.mimecast.com/s/FJ_9Co2XqAcEyGXIVub1j)