# No more SSO after 8.1.33?

**URL:** <https://forum.inductiveautomation.com/t/no-more-sso-after-8-1-33/81646>\
**Category:** Ignition\
**Created:** [November 8, 2023, 9:00am UTC](https://forum.inductiveautomation.com/t/no-more-sso-after-8-1-33/81646 "2023-11-08T09:00:31Z")\
**Posts on this page:** 12\
**Page:** 1

<div class="post-metadata">

**Author:** ![mwd123](https://avatars.discourse-cdn.com/v4/letter/m/ea666f/32.png) [@mwd123](https://forum.inductiveautomation.com/u/mwd123)\
**Post date:** [November 8, 2023, 9:00am UTC](https://forum.inductiveautomation.com/t/no-more-sso-after-8-1-33/81646/1 "2023-11-08T09:00:31Z")

</div>

Hi,

We have been using SSO on our dev env for a long time. After latest update I can't get it working again. Can't read anywhere in changelogs that it has been removed. Is it just for me or someone else has the same problem?

BR  
/M

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 8, 2023, 12:02pm UTC](https://forum.inductiveautomation.com/t/no-more-sso-after-8-1-33/81646/2 "2023-11-08T12:02:14Z")

</div>

What kind of SSO / what user sources? What version did you upgrade from?

---

<div class="post-metadata">

**Author:** ![mwd123](https://avatars.discourse-cdn.com/v4/letter/m/ea666f/32.png) [@mwd123](https://forum.inductiveautomation.com/u/mwd123)\
**Post date:** [November 8, 2023, 1:07pm UTC](https://forum.inductiveautomation.com/t/no-more-sso-after-8-1-33/81646/3 "2023-11-08T13:07:48Z")

</div>

AD user source (still works to fetch users from AD)

Upgraded from 8.1.27 which works fine still on other dev GW with SSO.

On 8.1.33 AD SSO stopped working.

Nothing in the log.

BR  
/M

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 8, 2023, 1:16pm UTC](https://forum.inductiveautomation.com/t/no-more-sso-after-8-1-33/81646/4 "2023-11-08T13:16:17Z")

</div>

> [@mwd123](#):
>
> Upgraded from 8.1.27 which works fine still on other dev GW with SSO.
> 
> On 8.1.33 AD SSO stopped working.

AD SSO should have stopped working in 8.1.17 unless you explicitly re-enabled it: [https://support.inductiveautomation.com/hc/en-us/articles/5979279808397-Active-Directory-SSO-Disabled-for-8-1-17-7-9-20-](https://support.inductiveautomation.com/hc/en-us/articles/5979279808397-Active-Directory-SSO-Disabled-for-8-1-17-7-9-20-)

---

<div class="post-metadata">

**Author:** ![mwd123](https://avatars.discourse-cdn.com/v4/letter/m/ea666f/32.png) [@mwd123](https://forum.inductiveautomation.com/u/mwd123)\
**Post date:** [November 8, 2023, 1:33pm UTC](https://forum.inductiveautomation.com/t/no-more-sso-after-8-1-33/81646/5 "2023-11-08T13:33:06Z")

</div>

Yes I have added to config enable sso.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [November 8, 2023, 2:09pm UTC](https://forum.inductiveautomation.com/t/no-more-sso-after-8-1-33/81646/6 "2023-11-08T14:09:16Z")

</div>

Well, we didn’t explicitly disable or change anything related to this, but it’s possible something about the JDK 11 to 17 upgrade broke it. We’re not testing or supporting it.

I’ll open a ticket to see if anyone is interested in chasing it down. You can open a support ticket if you want a more official issue on record.

---

<div class="post-metadata">

**Author:** ![avaughn](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/avaughn/32/38972_2.png) [@avaughn](https://forum.inductiveautomation.com/u/avaughn)\
**Post date:** [November 9, 2023, 3:04pm UTC](https://forum.inductiveautomation.com/t/no-more-sso-after-8-1-33/81646/7 "2023-11-09T15:04:49Z")

</div>

@mwd123 I tested 8.1.32 and 8.1.33 and AD SSO is still working for me.

Could you create a ticket with our [support department](https://support.inductiveautomation.com/hc/en-us) so we can gather more information about your configuration?

---

<div class="post-metadata">

**Author:** ![avaughn](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/avaughn/32/38972_2.png) [@avaughn](https://forum.inductiveautomation.com/u/avaughn)\
**Post date:** [November 21, 2023, 5:06pm UTC](https://forum.inductiveautomation.com/t/no-more-sso-after-8-1-33/81646/8 "2023-11-21T17:06:16Z")

</div>

@mwd123 I'm attempting to replicate the issue but haven't been able to yet. I wanted to check in and see if you would either be able to provide more details about your setup? If so, a support ticket is probably the best avenue for sharing that information.

---

<div class="post-metadata">

**Author:** ![mwd123](https://avatars.discourse-cdn.com/v4/letter/m/ea666f/32.png) [@mwd123](https://forum.inductiveautomation.com/u/mwd123)\
**Post date:** [November 23, 2023, 7:24am UTC](https://forum.inductiveautomation.com/t/no-more-sso-after-8-1-33/81646/9 "2023-11-23T07:24:36Z")

</div>

Sorry for late respons, been busy with other things. It's no biggie for us since we only use SSO in dev env. and after upgrade from 8.1.27 to 8.1.33 SSO stopped working. we run on linux. But I also noticed now that I can't manage users any more (my AD-usersource) I'll check the certificates etc. (it still works on other dev env with 8.1.27 and same certificate)

---

<div class="post-metadata">

**Author:** ![avaughn](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/avaughn/32/38972_2.png) [@avaughn](https://forum.inductiveautomation.com/u/avaughn)\
**Post date:** [November 27, 2023, 4:14pm UTC](https://forum.inductiveautomation.com/t/no-more-sso-after-8-1-33/81646/10 "2023-11-27T16:14:17Z")

</div>

> [@mwd123](#):
>
> we run on linux

Is this just where the gateway is hosted? Or are you also running the clients on linux? AD SSO is a windows feature, so the clients would have to be launched on Windows.

---

<div class="post-metadata">

**Author:** ![mwd123](https://avatars.discourse-cdn.com/v4/letter/m/ea666f/32.png) [@mwd123](https://forum.inductiveautomation.com/u/mwd123)\
**Post date:** [November 28, 2023, 7:17am UTC](https://forum.inductiveautomation.com/t/no-more-sso-after-8-1-33/81646/11 "2023-11-28T07:17:37Z")

</div>

We run the dev gateway on Linux, the clients are Windows. SSO works fine in 8.1.27.

---

<div class="post-metadata">

**Author:** ![avaughn](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/avaughn/32/38972_2.png) [@avaughn](https://forum.inductiveautomation.com/u/avaughn)\
**Post date:** [November 28, 2023, 2:43pm UTC](https://forum.inductiveautomation.com/t/no-more-sso-after-8-1-33/81646/12 "2023-11-28T14:43:36Z")

</div>

Could you set the `UserSource.ActiveDirectory` logger to `DEBUG` and then try to launch a client? Then could you download the logs and send me a copy? I know there will be some sensitive information, so you could dm me or open a support ticket and I can grab the logs from there.
