# \#security **URL:** https://forum.inductiveautomation.com/tag/security/14.md [Latest](https://forum.inductiveautomation.com/latest.md) · [Categories](https://forum.inductiveautomation.com/categories.md) · [Tags](https://forum.inductiveautomation.com/tags.md) --- ## [CVE-2026-92817 - question for IA?](https://forum.inductiveautomation.com/t/cve-2026-92817-question-for-ia/117477)
**Author:** [@tgarrison](https://forum.inductiveautomation.com/u/tgarrison)\ **Replies:** 2\ **Last updated:** [October 14, 2026, 1:33pm UTC](https://forum.inductiveautomation.com/t/cve-2026-92817-question-for-ia/117477 "2026-10-14T13:33:40Z")
Question - reading the CVE I'm not 100% positive.. hoping someone from IA could chime in? Does this security hole require both Vision and Perspective modules to be installed? Trying to prioritize our clients for upgra… --- ## [Trouble Hitting API Endpoints - 401](https://forum.inductiveautomation.com/t/trouble-hitting-api-endpoints-401/117390)
**Author:** [@sebastian.hothaza](https://forum.inductiveautomation.com/u/sebastian.hothaza)\ **Replies:** 4\ **Last updated:** [October 8, 2026, 6:47pm UTC](https://forum.inductiveautomation.com/t/trouble-hitting-api-endpoints-401/117390 "2026-10-08T18:47:10Z")
I am trying to use Postman to hit my API and I am having difficulty in authenticating my requests. I have attached the X-Ignition-API-Tokenas a header in Postman. I have the API key configured as follows: Note it i… --- ## [Microsoft Entra with RFID badge scanning Support?](https://forum.inductiveautomation.com/t/microsoft-entra-with-rfid-badge-scanning-support/117336)
**Author:** [@brian.york](https://forum.inductiveautomation.com/u/brian.york)\ **Replies:** 1\ **Last updated:** [October 5, 2026, 6:56pm UTC](https://forum.inductiveautomation.com/t/microsoft-entra-with-rfid-badge-scanning-support/117336 "2026-10-05T18:56:40Z")
I have a few questions related to using Microsoft Entra ID with RFID badge scanning and would appreciate hearing from anyone who has implemented something similar. Entra ID + RFID badges: Is anyone currently using RFID… --- ## [Possible Bug in v8.3 with Classic Authentication Mode for Designer w/ AD Failover to Local Source](https://forum.inductiveautomation.com/t/possible-bug-in-v8-3-with-classic-authentication-mode-for-designer-w-ad-failover-to-local-source/116991)
**Author:** [@michael.flagler](https://forum.inductiveautomation.com/u/michael.flagler)\ **Replies:** 4\ **Last updated:** [September 10, 2026, 2:30pm UTC](https://forum.inductiveautomation.com/t/possible-bug-in-v8-3-with-classic-authentication-mode-for-designer-w-ad-failover-to-local-source/116991 "2026-09-10T14:30:30Z")
I may have stumbled upon a bug when using classic authentication mode with an Active Directory user source with soft or hard failover to a local/internal user source when the Active Directory user source is not available… --- ## [Un-lockout Administrator user in Designer](https://forum.inductiveautomation.com/t/un-lockout-administrator-user-in-designer/85277)
**Author:** [@Mark\_Groening\_Hansen](https://forum.inductiveautomation.com/u/Mark_Groening_Hansen)\ **Replies:** 6\ **Last updated:** [July 16, 2026, 4:48pm UTC](https://forum.inductiveautomation.com/t/un-lockout-administrator-user-in-designer/85277 "2026-07-16T16:48:46Z")
Hello I was trying to log in on my Administrator account in the Ignition Designer. But after too many login attempts, i get the log message: Internal 06Feb2024 09:10:57 \[profileName=default\] User 'Administrator' is lo… --- ## [Security Level rule based on other Security Levels](https://forum.inductiveautomation.com/t/security-level-rule-based-on-other-security-levels/115705)
**Author:** [@malek](https://forum.inductiveautomation.com/u/malek)\ **Replies:** 8\ **Last updated:** [May 28, 2026, 12:28pm UTC](https://forum.inductiveautomation.com/t/security-level-rule-based-on-other-security-levels/115705 "2026-05-28T12:28:00Z")
Hello, Is there a way to create a Security Level rule based on another custom Security Level, rather than using Roles or Security Zones? For example, let’s say I have the following security groups: And I would like… --- ## [Replacing Azul Java with several CVEs](https://forum.inductiveautomation.com/t/replacing-azul-java-with-several-cves/115108)
**Author:** [@manuel.zech](https://forum.inductiveautomation.com/u/manuel.zech)\ **Replies:** 2\ **Last updated:** [April 17, 2026, 10:54am UTC](https://forum.inductiveautomation.com/t/replacing-azul-java-with-several-cves/115108 "2026-04-17T10:54:03Z")
Hi all, Ignition 8.3.4 comes bundled with Azul Zulu Java 17.62.18 from what I understand. Our security scans picked up several possible vulnerabilities in this version and our IT-Security departments advised us to upgra… --- ## [New Features: OAuth2 Clients and OAuth SMTP Email Profiles](https://forum.inductiveautomation.com/t/new-features-oauth2-clients-and-oauth-smtp-email-profiles/66783)
**Author:** [@jspecht](https://forum.inductiveautomation.com/u/jspecht)\ **Replies:** 17\ **Last updated:** [March 16, 2026, 7:03pm UTC](https://forum.inductiveautomation.com/t/new-features-oauth2-clients-and-oauth-smtp-email-profiles/66783 "2026-03-16T19:03:04Z")
Tomorrow's (11-22-2022) 8.1.24-SNAPSHOT early access build includes a couple of exciting new additions to the product: OAuth2 Clients and OAuth2 SMTP Email Profiles. Background Email providers such as Gmail and Microsof… --- ## [Perspective Grants User Component](https://forum.inductiveautomation.com/t/perspective-grants-user-component/114473)
**Author:** [@n099y](https://forum.inductiveautomation.com/u/n099y)\ **Replies:** 2\ **Last updated:** [March 12, 2026, 9:41pm UTC](https://forum.inductiveautomation.com/t/perspective-grants-user-component/114473 "2026-03-12T21:41:41Z")
I have been looking for a user grant component in exchange or similar, but I cannot seem to find any information on it. Is the only way to change User Grants in ignition by using the Gateway Config ? --- ## [Perspective Security Level Rules](https://forum.inductiveautomation.com/t/perspective-security-level-rules/114318)
**Author:** [@Matthew\_Automation](https://forum.inductiveautomation.com/u/Matthew_Automation)\ **Replies:** 11\ **Last updated:** [March 5, 2026, 6:39pm UTC](https://forum.inductiveautomation.com/t/perspective-security-level-rules/114318 "2026-03-05T18:39:09Z")
Hello My goal is to have my ignition 8.3 perspective project allow View Only (public) access, and ‘Admin’ access. If the user is signed in (Authenticated) but does not belong to ‘Admin’, I want to reject the user’s logi… --- ## [Secure password practices in wrapper file for network drive mapping](https://forum.inductiveautomation.com/t/secure-password-practices-in-wrapper-file-for-network-drive-mapping/113947)
**Author:** [@scott](https://forum.inductiveautomation.com/u/scott)\ **Replies:** 3\ **Last updated:** [February 23, 2026, 1:22am UTC](https://forum.inductiveautomation.com/t/secure-password-practices-in-wrapper-file-for-network-drive-mapping/113947 "2026-02-23T01:22:33Z")
Our customer has asked us to import files from a network drive to Ignition to process. I initially followed the documentation (linked here) to map a network drive successfully, however the customer cyber team have compl… --- ## [Modifying the database connection user/password via the json file in Ignition 8.3](https://forum.inductiveautomation.com/t/modifying-the-database-connection-user-password-via-the-json-file-in-ignition-8-3/114109)
**Author:** [@mrupperman](https://forum.inductiveautomation.com/u/mrupperman)\ **Replies:** 10\ **Last updated:** [February 22, 2026, 2:04am UTC](https://forum.inductiveautomation.com/t/modifying-the-database-connection-user-password-via-the-json-file-in-ignition-8-3/114109 "2026-02-22T02:04:44Z")
I am hoping to automate the install of Ignition, including creating a unique SQL Server local user per instance. I have the password securely stored within our backend, however through automation I will be retrieving it … --- ## [NoSuchMethodError when trying to login into perspective session](https://forum.inductiveautomation.com/t/nosuchmethoderror-when-trying-to-login-into-perspective-session/113830)
**Author:** [@christianmueck](https://forum.inductiveautomation.com/u/christianmueck)\ **Replies:** 2\ **Last updated:** [February 7, 2026, 3:21pm UTC](https://forum.inductiveautomation.com/t/nosuchmethoderror-when-trying-to-login-into-perspective-session/113830 "2026-02-07T15:21:33Z")
Hi everyone When I try to login into perspective, I get HTTP Error 500 HTTP ERROR 500 Server Error URI: /data/perspective/login/Vis STATUS: 500 MESSAGE: Server Error The server log has following warning: … --- ## [Writing to Edge tags from a Central Gateway using OIDC authentication](https://forum.inductiveautomation.com/t/writing-to-edge-tags-from-a-central-gateway-using-oidc-authentication/112974)
**Author:** [@Julien\_BROSSE](https://forum.inductiveautomation.com/u/Julien_BROSSE)\ **Replies:** 2\ **Last updated:** [December 29, 2025, 8:45am UTC](https://forum.inductiveautomation.com/t/writing-to-edge-tags-from-a-central-gateway-using-oidc-authentication/112974 "2025-12-29T08:45:26Z")
Hello, For a project, I have the following architecture: One Ignition Standard Gateway, connected to an LDAP usingOpenID Connect On a remote site, an Ignition Edge Panel A Gateway Network connection configured … --- ## [Security Zones, Gateway Names Identifiers Nothing Works](https://forum.inductiveautomation.com/t/security-zones-gateway-names-identifiers-nothing-works/111607)
**Author:** [@ericfrancik](https://forum.inductiveautomation.com/u/ericfrancik)\ **Replies:** 2\ **Last updated:** [October 23, 2025, 11:55am UTC](https://forum.inductiveautomation.com/t/security-zones-gateway-names-identifiers-nothing-works/111607 "2025-10-23T11:55:35Z")
I am trying to setup a security zone using the gateway names identifier. For testing I setup a label with an expression binding to the text property. The expression I use is: isAuthorized(true,'SecurityZones/ACME') Th… --- ## [Ignition Security Question](https://forum.inductiveautomation.com/t/ignition-security-question/110068)
**Author:** [@Alex\_Rayburg](https://forum.inductiveautomation.com/u/Alex_Rayburg)\ **Replies:** 6\ **Last updated:** [September 2, 2025, 2:45pm UTC](https://forum.inductiveautomation.com/t/ignition-security-question/110068 "2025-09-02T14:45:18Z")
Hello friends, I am lost in the sauce. I am implementing a AD/Ignition Hybrid user source. I have it connected and on the users tab I can see everyone(username, email, phone) and assign ignition defined roles. I did not… --- ## [8.3 Ad/Internal User Source Slow](https://forum.inductiveautomation.com/t/8-3-ad-internal-user-source-slow/109521)
**Author:** [@matthew.ayre](https://forum.inductiveautomation.com/u/matthew.ayre)\ **Replies:** 13\ **Last updated:** [August 13, 2025, 7:06am UTC](https://forum.inductiveautomation.com/t/8-3-ad-internal-user-source-slow/109521 "2025-08-13T07:06:12Z")
We use an AD/Internal User Source, and we’ve been finding that any changes to users (e.g. adding roles) are slow (30+ seconds) via the Gateway UI. Also, as there is no feedback in the UI to indicate that an action is be… --- ## [\[IGN-13209\] 8.3 Identity Provider doesn't allow badge authentication without badge secret](https://forum.inductiveautomation.com/t/ign-13209-8-3-identity-provider-doesnt-allow-badge-authentication-without-badge-secret/109588)
**Author:** [@matthew.ayre](https://forum.inductiveautomation.com/u/matthew.ayre)\ **Replies:** 1\ **Last updated:** [August 11, 2025, 8:42pm UTC](https://forum.inductiveautomation.com/t/ign-13209-8-3-identity-provider-doesnt-allow-badge-authentication-without-badge-secret/109588 "2025-08-11T20:42:36Z")
When enabling the ‘Badge’ authentication method without enabling the ‘Badge Secret’ we get the following error. ▶ Error Note: If you enable the ‘Badge Secret’, save the changes, edit the IdP again, then deselect ‘Badge S… --- ## [IdpAdapterException: Unable to parse the WebAuthResponse from the HTTP request](https://forum.inductiveautomation.com/t/idpadapterexception-unable-to-parse-the-webauthresponse-from-the-http-request/74891)
**Author:** [@Frosty](https://forum.inductiveautomation.com/u/Frosty)\ **Replies:** 11\ **Last updated:** [August 11, 2025, 9:47am UTC](https://forum.inductiveautomation.com/t/idpadapterexception-unable-to-parse-the-webauthresponse-from-the-http-request/74891 "2025-08-11T09:47:35Z")
Hi, I'm having trouble configuring Auth0 as an Identity Provider. Context: We are embedding the Perspective pages in our company web app, which is also secured with Auth0. To enable SSO and prevent any cross-site issue… --- ## [Security Viewing across Areas](https://forum.inductiveautomation.com/t/security-viewing-across-areas/108915)
**Author:** [@DiscoBot1](https://forum.inductiveautomation.com/u/DiscoBot1)\ **Replies:** 1\ **Last updated:** [July 24, 2025, 5:37pm UTC](https://forum.inductiveautomation.com/t/security-viewing-across-areas/108915 "2025-07-24T17:37:22Z")
There is two areas of a process: area A and area B. Is there a way to allow operators from area A to view area B's HMI screens, but not press any buttons or enter any values and vice versa. I simply want operators to see… --- ## [Security in Ignition. Is it possible to group the roles fetched from active directory and then create security levels in Ignition, which can be used for accessing gateway login](https://forum.inductiveautomation.com/t/security-in-ignition-is-it-possible-to-group-the-roles-fetched-from-active-directory-and-then-create-security-levels-in-ignition-which-can-be-used-for-accessing-gateway-login/108364)
**Author:** [@Akhil\_Mattam](https://forum.inductiveautomation.com/u/Akhil_Mattam)\ **Replies:** 3\ **Last updated:** [July 14, 2025, 12:47pm UTC](https://forum.inductiveautomation.com/t/security-in-ignition-is-it-possible-to-group-the-roles-fetched-from-active-directory-and-then-create-security-levels-in-ignition-which-can-be-used-for-accessing-gateway-login/108364 "2025-07-14T12:47:27Z")
I am fetching the users and Roles from Active directory. Is it possible to create a security level and group the roles fetched from the active directory. so that i can easily create user access to Ignition gateway --- ## [switchUser function in perspective](https://forum.inductiveautomation.com/t/switchuser-function-in-perspective/107418)
**Author:** [@Sebastian\_Braun](https://forum.inductiveautomation.com/u/Sebastian_Braun)\ **Replies:** 3\ **Last updated:** [June 16, 2025, 3:47pm UTC](https://forum.inductiveautomation.com/t/switchuser-function-in-perspective/107418 "2025-06-16T15:47:40Z")
Hey, I was using a switchUser function in vision through all of my projects so far, which enabled my projects to login/switch users, whenever a vadge was scanned. Right now I am trying to recreate something like this i… --- ## [Canary Security with Ignition](https://forum.inductiveautomation.com/t/canary-security-with-ignition/81790)
**Author:** [@Carel\_de\_Jager](https://forum.inductiveautomation.com/u/Carel_de_Jager)\ **Replies:** 4\ **Last updated:** [June 9, 2025, 1:37pm UTC](https://forum.inductiveautomation.com/t/canary-security-with-ignition/81790 "2025-06-09T13:37:50Z")
Hi I'm just wondering if there is anything special, I need to do when reading Canary trends into Ignition Trend components when security in Canary is activated. It was working fine before I activate security. Axiom wo… --- ## [Login on multiple devices at once - Perspective](https://forum.inductiveautomation.com/t/login-on-multiple-devices-at-once-perspective/106935)
**Author:** [@simon.zebaljec](https://forum.inductiveautomation.com/u/simon.zebaljec)\ **Replies:** 2\ **Last updated:** [June 5, 2025, 6:12am UTC](https://forum.inductiveautomation.com/t/login-on-multiple-devices-at-once-perspective/106935 "2025-06-05T06:12:31Z")
Hi. At our company we're implementing Ignition Perspective into our production. Till now we were using IFix from GE. Current challenge to solve is how to login on multiple devices on same time. Our workplace configura… --- ## [Security levels with rules in perspective](https://forum.inductiveautomation.com/t/security-levels-with-rules-in-perspective/106705)
**Author:** [@jonathan.axelsson](https://forum.inductiveautomation.com/u/jonathan.axelsson)\ **Replies:** 3\ **Last updated:** [May 27, 2025, 8:48am UTC](https://forum.inductiveautomation.com/t/security-levels-with-rules-in-perspective/106705 "2025-05-27T08:48:43Z")
Hi! I am developing a standardized SCADA project for my customer that they should be able to use on multiple different gateways in multiple different factorys without having to make changes to the perspective project si… --- ## [Security and Using the Default IdP](https://forum.inductiveautomation.com/t/security-and-using-the-default-idp/105640)
**Author:** [@tebright1](https://forum.inductiveautomation.com/u/tebright1)\ **Replies:** 5\ **Last updated:** [April 29, 2025, 2:46pm UTC](https://forum.inductiveautomation.com/t/security-and-using-the-default-idp/105640 "2025-04-29T14:46:28Z")
I am a little lost on Security. Initially I setup user logins with nothing special. To get to my Perspective application, you had to be "authenticated" to view it. Super simple. We are now trying to set up different view… --- ## [AD/Internal Hybrid User contact info not updating from AD](https://forum.inductiveautomation.com/t/ad-internal-hybrid-user-contact-info-not-updating-from-ad/95892)
**Author:** [@DavidO](https://forum.inductiveautomation.com/u/DavidO)\ **Replies:** 10\ **Last updated:** [April 9, 2025, 8:39pm UTC](https://forum.inductiveautomation.com/t/ad-internal-hybrid-user-contact-info-not-updating-from-ad/95892 "2025-04-09T20:39:13Z")
Need some help on AD/Internal Hybrid user source. I cannot get some user source contact info to update from AD. The users SMS-nr is used to send SMS-alarms so it is vital that updating in the AD takes effect in the Use… --- ## [Switching Users or Elevating Roles using Identity Providers with Vision](https://forum.inductiveautomation.com/t/switching-users-or-elevating-roles-using-identity-providers-with-vision/79426)
**Author:** [@dbailey](https://forum.inductiveautomation.com/u/dbailey)\ **Replies:** 1\ **Last updated:** [April 9, 2025, 12:57pm UTC](https://forum.inductiveautomation.com/t/switching-users-or-elevating-roles-using-identity-providers-with-vision/79426 "2025-04-09T12:57:38Z")
I am working on an application that wants to be able to use badge readers, along with Active Directory (DB Hybrid). As I understand, Ignition needs to use the database + Identity Provider authentication method for badge… --- ## [Security zone with IP addresses](https://forum.inductiveautomation.com/t/security-zone-with-ip-addresses/56899)
**Author:** [@marcos.bartolome](https://forum.inductiveautomation.com/u/marcos.bartolome)\ **Replies:** 7\ **Last updated:** [March 21, 2025, 9:50am UTC](https://forum.inductiveautomation.com/t/security-zone-with-ip-addresses/56899 "2025-03-21T09:50:50Z")
Hello, I trying to create a security zone to prevent access to perspective from outside of a specific IP range. (192.168..) I’ve created the security zone and I’ve configurated the project properties to restrict acces… --- ## [Authentication on custom data routes](https://forum.inductiveautomation.com/t/authentication-on-custom-data-routes/102962)
**Author:** [@Stian\_Strom](https://forum.inductiveautomation.com/u/Stian_Strom)\ **Replies:** 7\ **Last updated:** [February 27, 2025, 3:37pm UTC](https://forum.inductiveautomation.com/t/authentication-on-custom-data-routes/102962 "2025-02-27T15:37:18Z")
I've created a gateway-scoped module that has some data endpoints set up using mountRoutes in the GatewayHook. I need to secure these endpoints so that only authenticated users can GET/POST data to them. I've looked int… [Next page](https://forum.inductiveautomation.com/tag/security/14.md?match_all_tags=true&page=1&tags%5B%5D=security)