# Recommendation for logging in without user name (securely)

**URL:** <https://forum.inductiveautomation.com/t/recommendation-for-logging-in-without-user-name-securely/64390>\
**Category:** Ignition\
**Tags:** ignition78, security, database, scripting, vision\
**Created:** [September 22, 2022, 8:36pm UTC](https://forum.inductiveautomation.com/t/recommendation-for-logging-in-without-user-name-securely/64390 "2022-09-22T20:36:12Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![andrews](https://avatars.discourse-cdn.com/v4/letter/a/898d66/32.png) [@andrews](https://forum.inductiveautomation.com/u/andrews)\
**Post date:** [September 22, 2022, 8:36pm UTC](https://forum.inductiveautomation.com/t/recommendation-for-logging-in-without-user-name-securely/64390/1 "2022-09-22T20:36:12Z")

</div>

Hello again. Revisiting this topic, been doing a lot of spring cleaning in this system.

Running 7.8.5

Using RFD system to log people in. But I just want them to scan the badge and that’s it.

Cleared out a lot of useless scripts and solved the many windows open plaguing the system.

Also instead of the excel spreadsheet the old person here did. I would like to use a DB user source so we can use the vision user management component to handle accounts. I assume this will result in better lookups as well.

I’m just not sure how to grab the username from the RFID#(password) if I use the DB user source. And I hate to leave a non secure table out there to cross ref the # to a username.

What would be a good cross ref secure solution?

Thank you in advance.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [September 23, 2022, 1:06am UTC](https://forum.inductiveautomation.com/t/recommendation-for-logging-in-without-user-name-securely/64390/2 "2022-09-23T01:06:59Z")

</div>

The lookup has to occur somewhere, unless the RFID token has challenge-response functionality. (Or one-time password generation, etc.) It it just supplies an ID number, you can’t really call it secure. Static tokens are easily spoofed.

---

<div class="post-metadata">

**Author:** ![andrews](https://avatars.discourse-cdn.com/v4/letter/a/898d66/32.png) [@andrews](https://forum.inductiveautomation.com/u/andrews)\
**Post date:** [September 23, 2022, 2:07pm UTC](https://forum.inductiveautomation.com/t/recommendation-for-logging-in-without-user-name-securely/64390/3 "2022-09-23T14:07:43Z")

</div>

@pturmel has spoken! Congratulations on your award!