# Project will not change to new User Source

**URL:** <https://forum.inductiveautomation.com/t/project-will-not-change-to-new-user-source/83623>\
**Category:** Ignition\
**Tags:** security, ignition81, perspective\
**Created:** [December 29, 2023, 10:41pm UTC](https://forum.inductiveautomation.com/t/project-will-not-change-to-new-user-source/83623 "2023-12-29T22:41:32Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![Pat\_Cunningham](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pat_cunningham/32/57710_2.png) [@Pat\_Cunningham](https://forum.inductiveautomation.com/u/Pat_Cunningham)\
**Post date:** [December 29, 2023, 10:41pm UTC](https://forum.inductiveautomation.com/t/project-will-not-change-to-new-user-source/83623/1 "2023-12-29T22:41:32Z")

</div>

I created a new AD/Internal Hybrid user source added roles, user and verified the user. Then I went to Config-Projects-[My Project]-Connections and changed it to the new user source and confirmed in the designer under project settings. It still wants me to login using the old user source when I launch a session. But it does use the new one when I open the designer.

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [December 29, 2023, 10:48pm UTC](https://forum.inductiveautomation.com/t/project-will-not-change-to-new-user-source/83623/2 "2023-12-29T22:48:35Z")

</div>

Did you create an identity provider (IdP) to match?

[https://docs.inductiveautomation.com/display/DOC81/Identity+Provider+Authentication+Strategy](https://docs.inductiveautomation.com/display/DOC81/Identity+Provider+Authentication+Strategy)

Then select that in the project too.

It's a good while since I did this but I suspect that this may solve your identity crisis.

---

<div class="post-metadata">

**Author:** ![Pat\_Cunningham](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pat_cunningham/32/57710_2.png) [@Pat\_Cunningham](https://forum.inductiveautomation.com/u/Pat_Cunningham)\
**Post date:** [December 30, 2023, 2:07am UTC](https://forum.inductiveautomation.com/t/project-will-not-change-to-new-user-source/83623/3 "2023-12-30T02:07:37Z")

</div>

Now I have completely locked myself out of everything. Any suggestions on how to get back in?

---

<div class="post-metadata">

**Author:** ![Pat\_Cunningham](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pat_cunningham/32/57710_2.png) [@Pat\_Cunningham](https://forum.inductiveautomation.com/u/Pat_Cunningham)\
**Post date:** [December 30, 2023, 2:44am UTC](https://forum.inductiveautomation.com/t/project-will-not-change-to-new-user-source/83623/4 "2023-12-30T02:44:31Z")

</div>

I got back in and created the identity provider and changed it in every place I could find, and no luck. I have screenshots of everything but don't see anyway to attach

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [December 30, 2023, 4:12am UTC](https://forum.inductiveautomation.com/t/project-will-not-change-to-new-user-source/83623/5 "2023-12-30T04:12:07Z")

</div>

> [@Pat\_Cunningham](#):
>
> Any suggestions on how to get back in?

To avoid this in future I suggest:

- Leave the Administrator account in the 'default' provider.
- Set the AD/Internal Hybrid to soft-failover to the default.  
This way you can always log in to the Ignition gateway if the AD link fails or you mess up a setting and break the AD functionality (which would otherwise lock you out).

Make sure that 'Administrator' username and role in your AD setup is spelt exactly the same as in the default.

This is probably the only user you'll need in the default user source unless you want to create an account for someone outside of your organisation.

---

<div class="post-metadata">

**Author:** ![Matrix\_Engineering](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/matrix_engineering/32/19781_2.png) [@Matrix\_Engineering](https://forum.inductiveautomation.com/u/Matrix_Engineering)\
**Post date:** [December 30, 2023, 2:06pm UTC](https://forum.inductiveautomation.com/t/project-will-not-change-to-new-user-source/83623/6 "2023-12-30T14:06:25Z")

</div>

> [@Pat\_Cunningham](#):
>
> I have screenshots of everything but don't see anyway to attach

![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/3/a/3a5fe6a2998cc44f0f6bfd69543f5dbd288a0132.png)

Click this button in your reply ("Upload")

---

<div class="post-metadata">

**Author:** ![Pat\_Cunningham](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pat_cunningham/32/57710_2.png) [@Pat\_Cunningham](https://forum.inductiveautomation.com/u/Pat_Cunningham)\
**Post date:** [December 30, 2023, 5:55pm UTC](https://forum.inductiveautomation.com/t/project-will-not-change-to-new-user-source/83623/7 "2023-12-30T17:55:49Z")

</div>

Here is everything that I updated. I added an admin that is exactly the same as default and nothing changed. I am adding a button and selecting Login on the click event and it will not take my AD login.

 ![1](https://us1.discourse-cdn.com/inductiveautomation/original/3X/c/0/c0885be6b94605348c14abfbb343ad58e2bb7e3d.png)  
 ![2](https://us1.discourse-cdn.com/inductiveautomation/original/3X/5/9/598c4fea81e0ffcd63af951523d9ced43c32b953.png)  
 ![3](https://us1.discourse-cdn.com/inductiveautomation/original/3X/1/d/1d1df2efb2f1d45211b31d3100ab4ddf9e8e6887.png)  
 ![4](https://us1.discourse-cdn.com/inductiveautomation/original/3X/8/7/87099b0c9d90b9c6e932ba4592f096b5199c04ad.png)

---

<div class="post-metadata">

**Author:** ![Pat\_Cunningham](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pat_cunningham/32/57710_2.png) [@Pat\_Cunningham](https://forum.inductiveautomation.com/u/Pat_Cunningham)\
**Post date:** [December 30, 2023, 6:00pm UTC](https://forum.inductiveautomation.com/t/project-will-not-change-to-new-user-source/83623/8 "2023-12-30T18:00:26Z")

</div>

Thanks, it was late. 🤪

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [December 30, 2023, 6:02pm UTC](https://forum.inductiveautomation.com/t/project-will-not-change-to-new-user-source/83623/9 "2023-12-30T18:02:51Z")

</div>

If nobody else replies I'll have a look later but "Materials" **is not** a good name for an identity provider. Name it after the AD service (which hopefully has not been called "Materials").

---

<div class="post-metadata">

**Author:** ![Pat\_Cunningham](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pat_cunningham/32/57710_2.png) [@Pat\_Cunningham](https://forum.inductiveautomation.com/u/Pat_Cunningham)\
**Post date:** [December 31, 2023, 3:18pm UTC](https://forum.inductiveautomation.com/t/project-will-not-change-to-new-user-source/83623/10 "2023-12-31T15:18:10Z")

</div>

I was able to get it working by changing the strategy to Classic  
 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/1/3/130f5848e3db9da32cd2027066fe776a4f539951.png)
