Perspective project not picking up roles from User Source when using OpenID Connect 1.0 as IdP

Ignition
1

Hi all,

I have an ‘OpenID Connect 1.0’ as identity provider configured properly getting user credentials from the company’s Microsoft Entra ID. The intention with that is just to get the username, first/last name, and email, but not SCADA roles. It works fine for gateway security, but when I try to use it for projects (only tried perspective), it seems like it completely ignores the UserSource (internal or DB) and gets all user info from IdP only, which doesn’t come with roles… Is that by design and I’m misunderstanding the architecture? Or am I just missing some configuration that would correlate IdP and UserSource to pick up roles?

One thing I noticed that would be different anyways is the user id, since the IdP gives a string UID as opposed to the default numeric id from a user source.

Please advise.

2

Perspective only uses user sources when using the internal Ignition IdP, which delegates to a user source. If you use an external IdP, there's no connection to user sources at all.