# Multiple User Source for projects **URL:** \ **Category:** Ignition\ **Created:** [November 10, 2025, 1:47pm UTC](https://forum.inductiveautomation.com/t/multiple-user-source-for-projects/112069 "2025-11-10T13:47:56Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![gaf](https://avatars.discourse-cdn.com/v4/letter/g/b19c9b/32.png) [@gaf](https://forum.inductiveautomation.com/u/gaf)\ **Post date:** [November 10, 2025, 1:47pm UTC](https://forum.inductiveautomation.com/t/multiple-user-source-for-projects/112069/1 "2025-11-10T13:47:56Z")
Hi, I am setting up access control for two projects I have on my gateway. Each project is for a specific user group but I would also like the Designers/Integrators (default User source) to have access to the projects. So I have set up these user sources - UsersForProject1 - UsersForProject2 - default All users will be internal. Do I need to set up Identity Providers for each user source or can they all use the default Identity Provider? I imagine that a soft failover would be the way to go so that the default user source has access to all projects, but can I do that without creating Identity Providers for each user source? I changed the Project Properties to use the respective User Source, “UsersForProject”, but I am unable to log into the gateway or the project session. Am I on the right track or is there another way to do this? ---
**Author:** ![dillon](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/dillon/32/81537_2.png) [@dillon](https://forum.inductiveautomation.com/u/dillon)\ **Post date:** [November 10, 2025, 1:54pm UTC](https://forum.inductiveautomation.com/t/multiple-user-source-for-projects/112069/2 "2025-11-10T13:54:01Z")
> [@gaf](#): > > Do I need to set up Identity Providers for each user source AFAIK, IdPs to Usersources is a 1:1 ratio. ~~For every usersource you want to use, you must have an IdP for it.~~ Then the same with the project. You can only assign it one IdP. > [@gaf](#): > > I would also like the Designers/Integrators (default User source) to have access Go to `$/web/config/security.General?12` (Config → Security → General) to configure the designer's auth strategy. By default, it will use the `default` user source and allow you to access all projects in the designer. ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [November 10, 2025, 1:59pm UTC](https://forum.inductiveautomation.com/t/multiple-user-source-for-projects/112069/3 "2025-11-10T13:59:47Z")
> [@dillon](#): > > IdPs to Usersources is a 1:1 ratio. This is correct. > [@dillon](#): > > every usersource you want to use, you must have an IdP for it This is not. A user source can have soft failover to another user source (which can then soft fail to another). The IdP pointing at the first in the chain will neither know nor care. > [@gaf](#): > > but can I do that without creating Identity Providers for each user source? You should make user sources and identity providers for each project. Those user sources should soft fail to the default. (Not to each other.) Note that there is no such thing as failover in the Identity Provider standards. This behavior is only available with Ignition's internal IdP. ---
**Author:** ![dillon](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/dillon/32/81537_2.png) [@dillon](https://forum.inductiveautomation.com/u/dillon)\ **Post date:** [November 10, 2025, 2:01pm UTC](https://forum.inductiveautomation.com/t/multiple-user-source-for-projects/112069/4 "2025-11-10T14:01:57Z")
Ah ok... help me understand better... > [@pturmel](#): > > soft failover This means if the user/pass I gave to login doesn't match a user in IdP A, it will then check IdP B? and so on? ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [November 10, 2025, 2:03pm UTC](https://forum.inductiveautomation.com/t/multiple-user-source-for-projects/112069/5 "2025-11-10T14:03:46Z")
~~Yes~~ _Not Exactly_. > [@dillon](#): > > in IdP A, it will then check IdP B? If you replace "IdP" with "User Source", then Yes. IdPs do not do failover. Soft failover is for all user checks. Hard failover only applies to actual breakage (comms, database) in the user source. ---
**Author:** ![gaf](https://avatars.discourse-cdn.com/v4/letter/g/b19c9b/32.png) [@gaf](https://forum.inductiveautomation.com/u/gaf)\ **Post date:** [November 10, 2025, 2:07pm UTC](https://forum.inductiveautomation.com/t/multiple-user-source-for-projects/112069/6 "2025-11-10T14:07:47Z")
Thank you for the reply. Can you please confirm that this is the way to go: IdPs: - default → User Source: default - Project1 → User Source: UsersForProject1 - Project2 → User Source: UsersForProject2 User sources - default - UsersForProject1 → Failover source:default (soft) - UsersForProject2 → Failover source:default (soft) Project: IdP: Project 1, User Source: UsersForProject1