# SSO Login for Designer Session **URL:** \ **Category:** Ignition\ **Created:** [March 19, 2026, 12:27am UTC](https://forum.inductiveautomation.com/t/sso-login-for-designer-session/114564 "2026-03-19T00:27:32Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![TimeLordship](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/timelordship/32/50264_2.png) [@TimeLordship](https://forum.inductiveautomation.com/u/TimeLordship)\ **Post date:** [March 19, 2026, 12:27am UTC](https://forum.inductiveautomation.com/t/sso-login-for-designer-session/114564/1 "2026-03-19T00:27:32Z")
Hi, I recently turned on SAML for my application, then going into Security\>General settings, I turned on Allow Designer SSO, but it’s still not redirecting to SSO for authentication. ![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/4/5/45055bf2f1cd08a5d8aaa863dd225a0afb7d7b92.png) Related to: [Assign SAML response roles to Security User Roles](https://forum.inductiveautomation.com/t/assign-saml-response-roles-to-security-user-roles/114534) ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 19, 2026, 12:56am UTC](https://forum.inductiveautomation.com/t/sso-login-for-designer-session/114564/2 "2026-03-19T00:56:46Z")
Sounds like you want to change the strategy to Identity Provider. ---
**Author:** ![TimeLordship](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/timelordship/32/50264_2.png) [@TimeLordship](https://forum.inductiveautomation.com/u/TimeLordship)\ **Post date:** [March 19, 2026, 1:07am UTC](https://forum.inductiveautomation.com/t/sso-login-for-designer-session/114564/3 "2026-03-19T01:07:42Z")
I did that just recently, but the redirect link for designer seems to be wrong? Any guidance on how that is configured? ---
**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\ **Post date:** [March 19, 2026, 1:37am UTC](https://forum.inductiveautomation.com/t/sso-login-for-designer-session/114564/4 "2026-03-19T01:37:21Z")
It is right there in the screen shot that Designer SSO is not available when Auth strategy is IdP. 🤷‍♂️ ---
**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\ **Post date:** [March 19, 2026, 1:43am UTC](https://forum.inductiveautomation.com/t/sso-login-for-designer-session/114564/5 "2026-03-19T01:43:12Z")
Single Sign-On (SSO) Service URL property? > **[Configuring Identity Providers | Ignition User Manual](https://docs.inductiveautomation.com/docs/8.3/platform/security/identity-provider-authentication-strategy/configuring-identity-providers#security-assertion-markup-language-saml-providers:~:text=ENTITY_IDENTIFIER%2C%20PERSISTENT_IDENTIFIER%2C%20TRANSIENT_IDENTIFIER.-,Single%20Sign%2DOn%20(SSO)%20Service%20URL,-The%20Identity%20Provider%27s)** > > Registering the Ignition Gateway ---
**Author:** ![TimeLordship](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/timelordship/32/50264_2.png) [@TimeLordship](https://forum.inductiveautomation.com/u/TimeLordship)\ **Post date:** [March 19, 2026, 10:41am UTC](https://forum.inductiveautomation.com/t/sso-login-for-designer-session/114564/6 "2026-03-19T10:41:10Z")
> It is right there in the screen shot that Designer SSO is not available when Auth strategy is IdP. Hi, sorry I think I read it incorrectly earlier, I incorrectly thought that the user provider would handle that somehow. I am now using IDP. > Single Sign-On (SSO) Service URL property? Single Sign-On URL is set to : [https://InternalCompanyProvider.com/IDMSWebAuth/SAMLLogin?CertVersion=v2024A](https://InternalCompanyProvider.com/IDMSWebAuth/SAMLLogin?CertVersion=v2024A) SAML Sign-on is working well on the gateway webUI. When trying with Ignition, I’m getting this URL and a 403 Forbidden error: [https://ignition.company.com/data/federate/broker/redirect?idpId=company-IdMS+SAML&state=WzoDrkWJcEw5Rj7f6Y-ALO1Vx0zmMuHfjAn0PHW73qY&app=designer&idpUri=http%3A%2F%2F127.0.0.1%3A52409%2Fdata%2Fsaml%2Fsso%2FWzoDrkWJcEw5Rj7f6Y-ALO1Vx0zmMuHfjAn0PHW73qY&port=52409](https://ignition.company.com/data/federate/broker/redirect?idpId=company-IdMS+SAML&state=WzoDrkWJcEw5Rj7f6Y-ALO1Vx0zmMuHfjAn0PHW73qY&app=designer&idpUri=http%3A%2F%2F127.0.0.1%3A52409%2Fdata%2Fsaml%2Fsso%2FWzoDrkWJcEw5Rj7f6Y-ALO1Vx0zmMuHfjAn0PHW73qY&port=52409) ---
**Author:** ![TimeLordship](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/timelordship/32/50264_2.png) [@TimeLordship](https://forum.inductiveautomation.com/u/TimeLordship)\ **Post date:** [March 20, 2026, 7:39pm UTC](https://forum.inductiveautomation.com/t/sso-login-for-designer-session/114564/7 "2026-03-20T19:39:27Z")
Any help would be appreciated!