# Perspective support team login to same session

**URL:** <https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905>\
**Category:** Ignition\
**Tags:** ignition81, perspective\
**Created:** [December 8, 2023, 5:08pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905 "2023-12-08T17:08:38Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![Eagel007](https://avatars.discourse-cdn.com/v4/letter/e/7bcc69/32.png) [@Eagel007](https://forum.inductiveautomation.com/u/Eagel007)\
**Post date:** [December 8, 2023, 5:08pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/1 "2023-12-08T17:08:39Z")

</div>

Hi there,

I would like to create an option where if a supporting tech is working with main user logged in to the session, then we also record their information to make sure that accountability is to both techs working.

since perspective allows only 1 user log in per session. What is the possible way to achieve this?

Please advise.

Thanks

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [December 8, 2023, 5:13pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/2 "2023-12-08T17:13:41Z")

</div>

The same session of what?  
Are both logged into the gateway via the web interface?  
Or are both running a Perspective client application in browsers on their own PCs?

---

<div class="post-metadata">

**Author:** ![Eagel007](https://avatars.discourse-cdn.com/v4/letter/e/7bcc69/32.png) [@Eagel007](https://forum.inductiveautomation.com/u/Eagel007)\
**Post date:** [December 8, 2023, 5:15pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/3 "2023-12-08T17:15:18Z")

</div>

I am talking practically if 2 operators are required to perform a task, and if only one can log in, how do record the other user? to make sure his name is also recorded with the task being performed.

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [December 8, 2023, 5:19pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/4 "2023-12-08T17:19:28Z")

</div>

Whatever you do is going to, effectively, require them to log one user out and log the other in. This would be relatively painless with an RFID badge reader system and a very short auto-logout delay. They could navigate all they want without login but anytime a setpoint is to be changed a login is required.

---

<div class="post-metadata">

**Author:** ![Eagel007](https://avatars.discourse-cdn.com/v4/letter/e/7bcc69/32.png) [@Eagel007](https://forum.inductiveautomation.com/u/Eagel007)\
**Post date:** [December 8, 2023, 5:26pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/5 "2023-12-08T17:26:08Z")

</div>

which will not serve the purpose. @pturmel @Kevin.Herron , any thoughts ?

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [December 8, 2023, 5:28pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/6 "2023-12-08T17:28:24Z")

</div>

Well, please describe how you think it _could_ work? How will the computer / application know who is in control?

---

<div class="post-metadata">

**Author:** ![Eagel007](https://avatars.discourse-cdn.com/v4/letter/e/7bcc69/32.png) [@Eagel007](https://forum.inductiveautomation.com/u/Eagel007)\
**Post date:** [December 8, 2023, 5:29pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/7 "2023-12-08T17:29:48Z")

</div>

may be some custom property of the session keeps record.

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [December 8, 2023, 5:56pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/8 "2023-12-08T17:56:04Z")

</div>

> [@Eagel007](#):
>
> ... property of the session keeps record.

But keeps a record of what? The users have to do something to identify themselves or else Perspective has to have facial recognition cameras or calculate their finger size on a touch screen. What are you proposing?

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [December 8, 2023, 5:56pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/9 "2023-12-08T17:56:54Z")

</div>

Perspective's entire authentication/authorization model is strictly tied to one user being active on a given session at a time.  
What you're asking for is fundamentally counter to that philosophy, and basically impossible to do _properly_ unless we did it first party - which, frankly, we're not going to, because you're the first person I've ever seen ask for it.

---

<div class="post-metadata">

**Author:** ![Felipe\_CRM](https://avatars.discourse-cdn.com/v4/letter/f/dfb087/32.png) [@Felipe\_CRM](https://forum.inductiveautomation.com/u/Felipe_CRM)\
**Post date:** [December 8, 2023, 5:58pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/10 "2023-12-08T17:58:25Z")

</div>

Seems you may be able to use `system.security.validateUser` to check if a user is valid and if so, fake log them in (keep track of their user ID locally until "logged out"). Or just open an incognito tab so the second user can log in as a separate session, but that would be more work to correlate to the main session.

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [December 8, 2023, 5:59pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/11 "2023-12-08T17:59:10Z")

</div>

> [@Felipe\_CRM](#):
>
> `system.security.validateUser`

Doesn't work in ~~Perspective~~ /IdP context.

---

<div class="post-metadata">

**Author:** ![Felipe\_CRM](https://avatars.discourse-cdn.com/v4/letter/f/dfb087/32.png) [@Felipe\_CRM](https://forum.inductiveautomation.com/u/Felipe_CRM)\
**Post date:** [December 8, 2023, 5:59pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/12 "2023-12-08T17:59:51Z")

</div>

The docs might need to be updated if that's the case:

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/0/9/09935b0b00f678e7f89be797ba9a88fb86fcc94f.png)

I was about to test it out to see if it would actually work, so I'll provide an update shortly.

EDIT: set up a quick test and it at least appears to work:

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/5/c/5ce142fc87acfcb9c6678ab59dae5ddcff8c0339.png)  
(Please excuse the ugliness of my test setup):  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/a/3a404dfe24f14bdd157d751971c447ef471df7e0.png)

This was tested on 8.1.27.

---

<div class="post-metadata">

**Author:** ![Eagel007](https://avatars.discourse-cdn.com/v4/letter/e/7bcc69/32.png) [@Eagel007](https://forum.inductiveautomation.com/u/Eagel007)\
**Post date:** [December 8, 2023, 6:16pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/13 "2023-12-08T18:16:45Z")

</div>

nice! so I can record their username then to a custom property.

and set to null if they decided to log out! thanks

---

<div class="post-metadata">

**Author:** ![Felipe\_CRM](https://avatars.discourse-cdn.com/v4/letter/f/dfb087/32.png) [@Felipe\_CRM](https://forum.inductiveautomation.com/u/Felipe_CRM)\
**Post date:** [December 8, 2023, 6:20pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/14 "2023-12-08T18:20:51Z")

</div>

Keep in mind that you have to put in a user source for the third argument, an Identity Provider won't work (as Paul stated).

---

<div class="post-metadata">

**Author:** ![Eagel007](https://avatars.discourse-cdn.com/v4/letter/e/7bcc69/32.png) [@Eagel007](https://forum.inductiveautomation.com/u/Eagel007)\
**Post date:** [December 8, 2023, 6:23pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/15 "2023-12-08T18:23:20Z")

</div>

what is a user source?

---

<div class="post-metadata">

**Author:** ![Felipe\_CRM](https://avatars.discourse-cdn.com/v4/letter/f/dfb087/32.png) [@Felipe\_CRM](https://forum.inductiveautomation.com/u/Felipe_CRM)\
**Post date:** [December 8, 2023, 6:25pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/16 "2023-12-08T18:25:40Z")

</div>

See here:

[https://docs.inductiveautomation.com/display/DOC81/Classic+Authentication+Strategy](https://docs.inductiveautomation.com/display/DOC81/Classic+Authentication+Strategy)

If you have anything but an Ignition IdP (which links up to a User Source internally) you may not be able to use this approach.

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [December 8, 2023, 6:47pm UTC](https://forum.inductiveautomation.com/t/perspective-support-team-login-to-same-session/82905/17 "2023-12-08T18:47:49Z")

</div>

> what is a user source?

Riddhish, are you aware that Ignition has authentication and security built in? The user doesn't have to log out of the OS - just logout of the Perspective application.
