# Using Microsoft Entra for Single-Sign-On in Ignition

**URL:** <https://forum.inductiveautomation.com/t/using-microsoft-entra-for-single-sign-on-in-ignition/87122>\
**Category:** Ignition\
**Created:** [March 11, 2024, 12:42pm UTC](https://forum.inductiveautomation.com/t/using-microsoft-entra-for-single-sign-on-in-ignition/87122 "2024-03-11T12:42:13Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Taha\_Al\_Dailami](https://avatars.discourse-cdn.com/v4/letter/t/77aa72/32.png) [@Taha\_Al\_Dailami](https://forum.inductiveautomation.com/u/Taha_Al_Dailami)\
**Post date:** [March 11, 2024, 12:42pm UTC](https://forum.inductiveautomation.com/t/using-microsoft-entra-for-single-sign-on-in-ignition/87122/1 "2024-03-11T12:42:13Z")

</div>

Hello, my problem is as follows:

I have "built" an application from which I want to log into using Single-Sign-On (SSO).  
I hope that Microsoft Entra would make SSO possible.  
Is there a tutorial that shows how to "bind" Microsoft Entra and Ignition Identity Provider ?  
Which information would I need ?

Thanks a lot in advance.

---

<div class="post-metadata">

**Author:** ![SBL\_MC](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/sbl_mc/32/56813_2.png) [@SBL\_MC](https://forum.inductiveautomation.com/u/SBL_MC)\
**Post date:** [March 20, 2024, 1:31pm UTC](https://forum.inductiveautomation.com/t/using-microsoft-entra-for-single-sign-on-in-ignition/87122/2 "2024-03-20T13:31:35Z")

</div>

Hi,

SSO was disabled by default in 8.1.17 due to security issues.

> [@8.1.17 SSO login no longer working](https://forum.inductiveautomation.com/t/8-1-17-sso-login-no-longer-working/59544):
>
> Hello, We upgraded from 8.1.14 to 8.1.17 today. The first thing I noticed is that users are no longer automatically logged into Vision projects via SSO. The credentials still work when entered manually, so the AD connection is still working. Enable SSO login is still checked in the projects. Is there something that can be done to resolve this? Thanks, [image]

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [March 20, 2024, 1:33pm UTC](https://forum.inductiveautomation.com/t/using-microsoft-entra-for-single-sign-on-in-ignition/87122/3 "2024-03-20T13:33:10Z")

</div>

SSO is an overloaded term and you may be referring to something else.

What is no longer supported is the kind of SSO where the Windows user that you are already logged in as gets you into the Vision Client or Designer without entering your username/password again.

---

<div class="post-metadata">

**Author:** ![SvS](https://avatars.discourse-cdn.com/v4/letter/s/74df32/32.png) [@SvS](https://forum.inductiveautomation.com/u/SvS)\
**Post date:** [March 20, 2024, 2:21pm UTC](https://forum.inductiveautomation.com/t/using-microsoft-entra-for-single-sign-on-in-ignition/87122/4 "2024-03-20T14:21:03Z")

</div>

Right Kevin, Taha was actually talking about SSO for Perspective applications. We would like to use MS Entra ID (formally Azure AD) as an IDP in order to access Perspective applications without logging in first. We want to just use the Windows user information. Is that possible?

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [March 20, 2024, 2:23pm UTC](https://forum.inductiveautomation.com/t/using-microsoft-entra-for-single-sign-on-in-ignition/87122/5 "2024-03-20T14:23:30Z")

</div>

I'm fairly certain Azure AD can be used as an IdP and that many others are doing so.

Give support a call if you're having trouble setting it up.