# SSO Login for Designer Session

**URL:** <https://forum.inductiveautomation.com/t/sso-login-for-designer-session/114564>\
**Category:** Ignition\
**Created:** [March 19, 2026, 12:27am UTC](https://forum.inductiveautomation.com/t/sso-login-for-designer-session/114564 "2026-03-19T00:27:32Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![TimeLordship](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/timelordship/32/50264_2.png) [@TimeLordship](https://forum.inductiveautomation.com/u/TimeLordship)\
**Post date:** [March 19, 2026, 10:41am UTC](https://forum.inductiveautomation.com/t/sso-login-for-designer-session/114564/6 "2026-03-19T10:41:10Z")

</div>

> It is right there in the screen shot that Designer SSO is not available when Auth strategy is IdP.

Hi, sorry I think I read it incorrectly earlier, I incorrectly thought that the user provider would handle that somehow. I am now using IDP.

> Single Sign-On (SSO) Service URL property?

Single Sign-On URL is set to : [https://InternalCompanyProvider.com/IDMSWebAuth/SAMLLogin?CertVersion=v2024A](https://InternalCompanyProvider.com/IDMSWebAuth/SAMLLogin?CertVersion=v2024A)

SAML Sign-on is working well on the gateway webUI.

When trying with Ignition, I’m getting this URL and a 403 Forbidden error:

[https://ignition.company.com/data/federate/broker/redirect?idpId=company-IdMS+SAML&state=WzoDrkWJcEw5Rj7f6Y-ALO1Vx0zmMuHfjAn0PHW73qY&app=designer&idpUri=http%3A%2F%2F127.0.0.1%3A52409%2Fdata%2Fsaml%2Fsso%2FWzoDrkWJcEw5Rj7f6Y-ALO1Vx0zmMuHfjAn0PHW73qY&port=52409](https://ignition.company.com/data/federate/broker/redirect?idpId=company-IdMS+SAML&state=WzoDrkWJcEw5Rj7f6Y-ALO1Vx0zmMuHfjAn0PHW73qY&app=designer&idpUri=http%3A%2F%2F127.0.0.1%3A52409%2Fdata%2Fsaml%2Fsso%2FWzoDrkWJcEw5Rj7f6Y-ALO1Vx0zmMuHfjAn0PHW73qY&port=52409)

---

_[View the full topic](https://forum.inductiveautomation.com/t/sso-login-for-designer-session/114564)._