# On-Prem (not azure) AD IdP - anyone got a good tutorial?

**URL:** <https://forum.inductiveautomation.com/t/on-prem-not-azure-ad-idp-anyone-got-a-good-tutorial/77020>\
**Category:** Ignition\
**Created:** [July 27, 2023, 2:45pm UTC](https://forum.inductiveautomation.com/t/on-prem-not-azure-ad-idp-anyone-got-a-good-tutorial/77020 "2023-07-27T14:45:15Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ted.garrison](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/ted.garrison/32/11732_2.png) [@ted.garrison](https://forum.inductiveautomation.com/u/ted.garrison)\
**Post date:** [July 27, 2023, 2:45pm UTC](https://forum.inductiveautomation.com/t/on-prem-not-azure-ad-idp-anyone-got-a-good-tutorial/77020/1 "2023-07-27T14:45:15Z")

</div>

Anyone got a good writeup/tutorial on configuring an On-Premise Active Directory IdP? We've got to the point where I can get the authnResponse (by turning off the sig validation). And I can see the Attributes in the response, but for the life of me, I can not get them to map to user attributes.

[Xpather.com](http://Xpather.com) appears to not like the format of the Response past the first node. (I think it's because the saml: prefixes are missing in all but the saml2p:Respone node - but it's supposedly a valid SAML response per Msft's help.