# Usersource Hybrid, is this the right one?

**URL:** <https://forum.inductiveautomation.com/t/usersource-hybrid-is-this-the-right-one/115373>\
**Category:** Ignition\
**Created:** [May 4, 2026, 11:45pm UTC](https://forum.inductiveautomation.com/t/usersource-hybrid-is-this-the-right-one/115373 "2026-05-04T23:45:33Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Eugene49](https://avatars.discourse-cdn.com/v4/letter/e/c6cbf5/32.png) [@Eugene49](https://forum.inductiveautomation.com/u/Eugene49)\
**Post date:** [May 4, 2026, 11:45pm UTC](https://forum.inductiveautomation.com/t/usersource-hybrid-is-this-the-right-one/115373/1 "2026-05-04T23:45:33Z")

</div>

For the project I am working on, We want to use Entra to provide Authentication, that is loggin into the project.

But the project has been using existing database tables that holds users, roles and user\_roles\_mapping.

Also the project has has existing Authorization and access control, that uses the database tables mentioned.

We want to implement such that Entra will provide authentication to the project.  
Once user logged in, run a script to auto add the user to the db user table, with arbitrary role.  
Then, later, manually set the user's role to the intended user roles.

I am thinking if this is exactly what User Source -\> Hybrid does?

Does anyone know this?

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [May 5, 2026, 12:06am UTC](https://forum.inductiveautomation.com/t/usersource-hybrid-is-this-the-right-one/115373/2 "2026-05-05T00:06:20Z")

</div>

Entra is an Identity Provider?

When you use an external IdP, it must supply everything, as only the built-in Ignition IdP accesses a user source at all. User sources are legacy technologies that **only** work with Ignition's internal IdP.

In other words, No.

---

<div class="post-metadata">

**Author:** ![Eugene49](https://avatars.discourse-cdn.com/v4/letter/e/c6cbf5/32.png) [@Eugene49](https://forum.inductiveautomation.com/u/Eugene49)\
**Post date:** [May 5, 2026, 12:14am UTC](https://forum.inductiveautomation.com/t/usersource-hybrid-is-this-the-right-one/115373/3 "2026-05-05T00:14:31Z")

</div>

Got it. I thought AD = IdP.. Beginners bad..  
I am still confuse with similarities and difference.  
But i got that they are not interchangeable.

---

<div class="post-metadata">

**Author:** ![David\_Stone](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/david_stone/32/79749_2.png) [@David\_Stone](https://forum.inductiveautomation.com/u/David_Stone)\
**Post date:** [May 5, 2026, 7:51pm UTC](https://forum.inductiveautomation.com/t/usersource-hybrid-is-this-the-right-one/115373/4 "2026-05-05T19:51:32Z")

</div>

> [@pturmel](#):
>
> Entra is an Identity Provider?

Entra is the new name for Azure Active Directory, microslop’s cloud AD service.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [May 5, 2026, 8:35pm UTC](https://forum.inductiveautomation.com/t/usersource-hybrid-is-this-the-right-one/115373/5 "2026-05-05T20:35:02Z")

</div>

> [@David\_Stone](#):
>
> new name for Azure Active Directory

Ah, something to be avoided, then.