# User Source vs Identity Provider with Active Directory

**URL:** <https://forum.inductiveautomation.com/t/user-source-vs-identity-provider-with-active-directory/66643>\
**Category:** Ignition\
**Created:** [November 17, 2022, 5:24pm UTC](https://forum.inductiveautomation.com/t/user-source-vs-identity-provider-with-active-directory/66643 "2022-11-17T17:24:46Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![Transistor](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/transistor/32/3380_2.png) [@Transistor](https://forum.inductiveautomation.com/u/Transistor)\
**Post date:** [November 17, 2022, 7:37pm UTC](https://forum.inductiveautomation.com/t/user-source-vs-identity-provider-with-active-directory/66643/6 "2022-11-17T19:37:17Z")

</div>

I recommend soft fallover mode to the default database and leave the Administrator account in there. That way you have a way in if the AD setup fails or you lock yourself out somehow (especially during configuration). You can also use the default user source to create and manage accounts for non-AD members such as contractors.

---

_[View the full topic](https://forum.inductiveautomation.com/t/user-source-vs-identity-provider-with-active-directory/66643)._