# Connect Nexus repo Login to Windows AD

**URL:** <https://community.sonatype.com/t/connect-nexus-repo-login-to-windows-ad/6588>\
**Category:** Sonatype Nexus Repository\
**Tags:** nexus-repository\
**Created:** [May 24, 2021, 10:23am UTC](https://community.sonatype.com/t/connect-nexus-repo-login-to-windows-ad/6588 "2021-05-24T10:23:34Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![oscar.franch](https://avatars.discourse-cdn.com/v4/letter/o/ccd318/32.png) [@oscar.franch](https://community.sonatype.com/u/oscar.franch)\
**Post date:** [May 24, 2021, 10:23am UTC](https://community.sonatype.com/t/connect-nexus-repo-login-to-windows-ad/6588/1 "2021-05-24T10:23:34Z")

</div>

Hi.

We have two ways to authenticate in our nexus 3.28 repo. One is with local nexus users, the other one is with a SSO system. It is possible to use Windows AD login to bring automatic access to our Nexus repository? Can we avoid the second login?

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![btucker](https://avatars.discourse-cdn.com/v4/letter/b/5daacb/32.png) [@btucker](https://community.sonatype.com/u/btucker)\
**Post date:** [June 3, 2021, 1:37pm UTC](https://community.sonatype.com/t/connect-nexus-repo-login-to-windows-ad/6588/2 "2021-06-03T13:37:10Z")

</div>

If you are asking if you can tie in permissions from windows AD yes. You can tie the system to AD through LDAP. Documentation here: [LDAP Integration](https://help.sonatype.com/repomanager2/ldap-integration)

If you mean will it auto log you into the UI or one of the repos without giving it your credentials. No not to the best of my knowledge.

---

<div class="post-metadata">

**Author:** ![mpiggott](https://avatars.discourse-cdn.com/v4/letter/m/f0a364/32.png) [@mpiggott](https://community.sonatype.com/u/mpiggott)\
**Post date:** [June 3, 2021, 2:06pm UTC](https://community.sonatype.com/t/connect-nexus-repo-login-to-windows-ad/6588/3 "2021-06-03T14:06:02Z")

</div>

You might be able to use [reverse user tokens](https://help.sonatype.com/repomanager3/system-configuration/user-authentication/authentication-via-remote-user-token) if you can provide a reverse proxy that can set a header for the user.
