# SSO not working

**URL:** <https://forum.inductiveautomation.com/t/sso-not-working/28197>\
**Category:** Ignition\
**Tags:** ignition79\
**Created:** [September 12, 2019, 10:11am UTC](https://forum.inductiveautomation.com/t/sso-not-working/28197 "2019-09-12T10:11:21Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![781646229](https://avatars.discourse-cdn.com/v4/letter/7/e47774/32.png) [@781646229](https://forum.inductiveautomation.com/u/781646229)\
**Post date:** [September 12, 2019, 10:11am UTC](https://forum.inductiveautomation.com/t/sso-not-working/28197/1 "2019-09-12T10:11:21Z")

</div>

I need to use SSO login，I successfully configure User Sources of type Active Directory，I’ve also set the project’s properties to SSO login and the user source to my configured Active Directory, but I didn’t log in automatically when I opened the client. I still need to enter my local account and password manually to log in.

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/2X/1/1250a722bebb0e38db97bd9c5d6017179d9415be.png)

![image](https://us1.discourse-cdn.com/inductiveautomation/original/2X/d/db009633b2fe8d0b82c8c27c737e69a944fea78a.png)

 ![image](https://us1.discourse-cdn.com/inductiveautomation/original/2X/d/da31a69da5a585a53ce9d75bfe4b33ea0346e4fb.png)

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [September 12, 2019, 3:30pm UTC](https://forum.inductiveautomation.com/t/sso-not-working/28197/2 "2019-09-12T15:30:58Z")

</div>

Try putting the SSOHelper logger on the gateway to TRACE and launching a client.

---

<div class="post-metadata">

**Author:** ![joel.golinucci](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/joel.golinucci/32/9927_2.png) [@joel.golinucci](https://forum.inductiveautomation.com/u/joel.golinucci)\
**Post date:** [September 25, 2019, 10:54am UTC](https://forum.inductiveautomation.com/t/sso-not-working/28197/3 "2019-09-25T10:54:35Z")

</div>

I had the same issue:

> SSO domains did not match! Compared ' **.local' and '**'

In the gateway, in my user source, the domain has to be \*\*\*\*\*\*.local, but I had to specify the SSO Domain to be only \*\*\*\*\*\* (without the .local) and now it works fine.

---

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [April 8, 2020, 4:15pm UTC](https://forum.inductiveautomation.com/t/sso-not-working/28197/4 "2020-04-08T16:15:02Z")

</div>

This thread put me on the right track but mine was case sensitive.

Domain: [mycompany.com](http://mycompany.com)  
SSO domain: MYCOMPANY

Note that this was on a company intranet.

Thank you, Joel.

---

<div class="post-metadata">

**Author:** ![Neo](https://avatars.discourse-cdn.com/v4/letter/n/9fc348/32.png) [@Neo](https://forum.inductiveautomation.com/u/Neo)\
**Post date:** [October 14, 2020, 3:21pm UTC](https://forum.inductiveautomation.com/t/sso-not-working/28197/5 "2020-10-14T15:21:27Z")

</div>

I am also getting the same error. (Need to enter credentials manually). I removed .local from domain name as I got same log as mentioned by Joel above. But still the issue persists.

I am using AD/Internal Hybrid type for user source on Ignition v8.0.15. I am getting positive response for verification of user source.

Is anything else required?