# Windows current user: Perspective passthrough authentication

**URL:** <https://forum.inductiveautomation.com/t/windows-current-user-perspective-passthrough-authentication/81866>\
**Category:** Ignition\
**Tags:** ignition81, perspective\
**Created:** [November 14, 2023, 3:46pm UTC](https://forum.inductiveautomation.com/t/windows-current-user-perspective-passthrough-authentication/81866 "2023-11-14T15:46:02Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![pgmo](https://avatars.discourse-cdn.com/v4/letter/p/d07c76/32.png) [@pgmo](https://forum.inductiveautomation.com/u/pgmo)\
**Post date:** [November 14, 2023, 3:46pm UTC](https://forum.inductiveautomation.com/t/windows-current-user-perspective-passthrough-authentication/81866/1 "2023-11-14T15:46:02Z")

</div>

Hi all,  
My customer has the following need: the currently logged in Windows User should be able to open a Perspective Session without typing his username and password and should get all his roles automatically. Ignition Security has been configured to use Active Directory: any suggestion?

Thanks in advance, regards

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [November 14, 2023, 4:04pm UTC](https://forum.inductiveautomation.com/t/windows-current-user-perspective-passthrough-authentication/81866/2 "2023-11-14T16:04:47Z")

</div>

That's called "single sign on". There are security issues on the Microsoft side that caused IA to disable it by default in current versions.

> **[Active Directory SSO Disabled for 8.1.17 & 7.9.20](https://support.inductiveautomation.com/hc/en-us/articles/5979279808397-Active-Directory-SSO-Disabled-for-8-1-17-7-9-20-)**
>
> A security vulnerability was found when enabling the SSO (Single Sign-On) feature for AD (Active Directory) User Source profiles. As a result, the feature will be disabled for both Ignition version...

You should counsel your customer to not use this until Microsoft fixes the issue or provides an alternative.

For Perspective, if you switch to an Identity Provider from your AD, you can probably work around this (perhaps only with the MS Edge Browser). Probably _ **not** _ using IA's Identity Provider backed by an AD user source.

---

<div class="post-metadata">

**Author:** ![pgmo](https://avatars.discourse-cdn.com/v4/letter/p/d07c76/32.png) [@pgmo](https://forum.inductiveautomation.com/u/pgmo)\
**Post date:** [November 14, 2023, 4:32pm UTC](https://forum.inductiveautomation.com/t/windows-current-user-perspective-passthrough-authentication/81866/3 "2023-11-14T16:32:25Z")

</div>

Ok, many thanks @pturmel .

Regards