# User sources for different sites

**URL:** <https://forum.inductiveautomation.com/t/user-sources-for-different-sites/64879>\
**Category:** Ignition\
**Created:** [October 6, 2022, 3:39am UTC](https://forum.inductiveautomation.com/t/user-sources-for-different-sites/64879 "2022-10-06T03:39:05Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![chaoliang](https://avatars.discourse-cdn.com/v4/letter/c/ba8739/32.png) [@chaoliang](https://forum.inductiveautomation.com/u/chaoliang)\
**Post date:** [October 6, 2022, 3:39am UTC](https://forum.inductiveautomation.com/t/user-sources-for-different-sites/64879/1 "2022-10-06T03:39:05Z")

</div>

I want to achieve the following user access architecture:

1. different user group dedicated for each site
2. a core user group for accessing all sites

what's the best way to achieve this?

Thanks in Advance.

---

<div class="post-metadata">

**Author:** ![DavidWisely](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/davidwisely/32/10482_2.png) [@DavidWisely](https://forum.inductiveautomation.com/u/DavidWisely)\
**Post date:** [October 6, 2022, 4:38am UTC](https://forum.inductiveautomation.com/t/user-sources-for-different-sites/64879/2 "2022-10-06T04:38:00Z")

</div>

Is this for just one project, or a project at each site?  
It also depends on what type of User Source you will use. E.g. Internal, Active Directory, etc.

Assuming a project at each site and Internal User Sources:  
I would create two UserSources at each site, one primary with your dedicated users, and one for failing over to with your core users. To reduce the management of the core users you could make it a database user source and maintain a database table at each site with the same users, either through replication, or ETL etc.

---

<div class="post-metadata">

**Author:** ![chaoliang](https://avatars.discourse-cdn.com/v4/letter/c/ba8739/32.png) [@chaoliang](https://forum.inductiveautomation.com/u/chaoliang)\
**Post date:** [October 6, 2022, 4:42am UTC](https://forum.inductiveautomation.com/t/user-sources-for-different-sites/64879/3 "2022-10-06T04:42:45Z")

</div>

One project for each site.  
each site has its own user source using database type.  
the core user source is also database type.  
I tried to apply each project with its user source, and each user source configured to have fallover to the core user source.  
But it won't work, for some reason, then I realized there's another layer called identity Provider. Then I got confused.  
But I tried configure a idP for each site, and each idP is linked to the project user source, but it still does not work.

---

<div class="post-metadata">

**Author:** ![chaoliang](https://avatars.discourse-cdn.com/v4/letter/c/ba8739/32.png) [@chaoliang](https://forum.inductiveautomation.com/u/chaoliang)\
**Post date:** [October 6, 2022, 5:52am UTC](https://forum.inductiveautomation.com/t/user-sources-for-different-sites/64879/4 "2022-10-06T05:52:52Z")

</div>

this solution works.

Just need to change the fallover mode from hard to soft.