# Lost Gateway Admin Access after IDP Change

**URL:** <https://forum.inductiveautomation.com/t/lost-gateway-admin-access-after-idp-change/111782>\
**Category:** Ignition\
**Created:** [October 29, 2025, 12:54pm UTC](https://forum.inductiveautomation.com/t/lost-gateway-admin-access-after-idp-change/111782 "2025-10-29T12:54:19Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![bismaylla](https://avatars.discourse-cdn.com/v4/letter/b/7feea3/32.png) [@bismaylla](https://forum.inductiveautomation.com/u/bismaylla)\
**Post date:** [October 29, 2025, 12:54pm UTC](https://forum.inductiveautomation.com/t/lost-gateway-admin-access-after-idp-change/111782/1 "2025-10-29T12:54:19Z")

</div>

Hi,

I recently created a new Identity Provider (IDP) for my team and switched the Gateway to use this new IDP. Unfortunately, I lost access to the default IDP where my original admin user was configured, and the admin user I set in the new IDP does not seem to have Gateway access.

Now I cannot log in to the Gateway at all.

Could you please guide me on how to recover access to the Gateway or reset the admin user?

Additional information:

Ignition version: [8.1]

OS: Linux

Thank you in advance for your help!

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [October 29, 2025, 12:54pm UTC](https://forum.inductiveautomation.com/t/lost-gateway-admin-access-after-idp-change/111782/2 "2025-10-29T12:54:58Z")

</div>

> **[Gateway Command-line Utility - gwcmd | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.1/platform/gateway/gateway-command-line-utility-gwcmd#gateway-password-reset)**
>
> The Gateway Command-line Utility provides a list of commands you can use to perform specific functions in the Gateway. The Gateway Command-line Utility or gwcmd provides basic commands, such as resetting the main password, changing the Gateway's...

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [October 29, 2025, 6:03pm UTC](https://forum.inductiveautomation.com/t/lost-gateway-admin-access-after-idp-change/111782/3 "2025-10-29T18:03:48Z")

</div>

~~To prevent this problem in future, I suggest that you set the soft failover to the default admin account.~~ See below!

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [October 29, 2025, 7:09pm UTC](https://forum.inductiveautomation.com/t/lost-gateway-admin-access-after-idp-change/111782/4 "2025-10-29T19:09:25Z")

</div>

> [@Transistor](#):
>
> soft failover

Identity Providers do not have any kind of failover.

Classic User sources can have failover, and the Ignition internal IdP can point at the first of a series to such user sources. But external identity providers must be comprehensive.

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [October 29, 2025, 7:57pm UTC](https://forum.inductiveautomation.com/t/lost-gateway-admin-access-after-idp-change/111782/5 "2025-10-29T19:57:55Z")

</div>

> [@pturmel](#):
>
> Identity Providers do not have any kind of failover.

Thanks. I think I'm still missing something fundamental in my understanding of the two. I have a tremendous fund of ignorance to draw from when posting answers. 🙄