# Have request to sign in with windows auth as a single sign on source

**URL:** <https://community.auth0.com/t/have-request-to-sign-in-with-windows-auth-as-a-single-sign-on-source/25534>\
**Category:** Get Help\
**Tags:** sso-integration, windows-ad-authoriza\
**Created:** [May 21, 2019, 7:57pm UTC](https://community.auth0.com/t/have-request-to-sign-in-with-windows-auth-as-a-single-sign-on-source/25534 "2019-05-21T19:57:10Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![codeshoulders](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/codeshoulders/32/13369_2.png) [@codeshoulders](https://community.auth0.com/u/codeshoulders)\
**Post date:** [May 21, 2019, 7:57pm UTC](https://community.auth0.com/t/have-request-to-sign-in-with-windows-auth-as-a-single-sign-on-source/25534/1 "2019-05-21T19:57:11Z")

</div>

Howdy,

Just got a client request today to allow them to login through windows as use that as their authentication for various websites.

Is that something that could be supported, and if so where can I start researching it? I’m entirely new in the auth0 space, but I’ve done some work with cross website sso in the past.

Thanks!

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [May 22, 2019, 12:18pm UTC](https://community.auth0.com/t/have-request-to-sign-in-with-windows-auth-as-a-single-sign-on-source/25534/2 "2019-05-22T12:18:59Z")

</div>

Hey there @codeshoulders!

Don’t have much experience in this particular field but this step-by-step tutorial from us might actually be helpful here:

> **[Connect Your App to Active Directory using LDAP](https://auth0.com/docs/authenticate/identity-providers/enterprise-identity-providers/active-directory-ldap)**
>
> Learn how to connect your app to Active Directory (AD) using Lightweight Directory Access Protocol (LDAP) through an enterprise connection.

---

<div class="post-metadata">

**Author:** ![codeshoulders](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/codeshoulders/32/13369_2.png) [@codeshoulders](https://community.auth0.com/u/codeshoulders)\
**Post date:** [May 22, 2019, 5:33pm UTC](https://community.auth0.com/t/have-request-to-sign-in-with-windows-auth-as-a-single-sign-on-source/25534/3 "2019-05-22T17:33:40Z")

</div>

Thanks I’ll give it a good work through. Cheers

---

<div class="post-metadata">

**Author:** ![konrad.sopala](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/konrad.sopala/32/13516_2.png) [@konrad.sopala](https://community.auth0.com/u/konrad.sopala)\
**Post date:** [May 22, 2019, 5:35pm UTC](https://community.auth0.com/t/have-request-to-sign-in-with-windows-auth-as-a-single-sign-on-source/25534/4 "2019-05-22T17:35:58Z")

</div>

Let me know if you have any questions down the road!

---

<div class="post-metadata">

**Author:** ![mattilaj](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/mattilaj/32/4995_2.png) [@mattilaj](https://community.auth0.com/u/mattilaj)\
**Post date:** [June 12, 2019, 12:48pm UTC](https://community.auth0.com/t/have-request-to-sign-in-with-windows-auth-as-a-single-sign-on-source/25534/5 "2019-06-12T12:48:10Z")

</div>

We have the exact same request. Our customer wants to SSO from their windows workstations to our service. Can you elaborate if using LDAP connector is the way to implement that? The reason I’m asking is that I found this in [https://auth0.com/docs/connector/overview:](https://auth0.com/docs/connector/overview:)

> ### AD/LDAP Connector and Your Customer’s Servers
> 
> The AD/LDAP Connector is designed for scenarios where your company controls the AD/LDAP server. The connector should **not** be installed on your customer’s servers.
> 
> For B2B scenarios where you want to allow your customer’s users to access your applications using their enterprise credentials, connect to your customer’s federation service (e.g., their own Auth0 service, ADFS, or any SAML identity provider) using one of the available enterprise connections.
> 
> If you install an AD/LDAP connector on your customer’s servers and it is connected directly to your Auth0 domain, you will have to handle the passwords of your customer’s users directly. Auth0 strongly recommends against these types of deployments and does not support them.

So, what is this the recommended approach for supporting customer wanting windows authentication SSO? I don’t understand why LDAP connector should not be installed on customer sites and if it were, how would that make us responsible for handing their passwords?

Thanks!
