---
title: "Admins based on On-Premise"
slug: "admins-based-on-on-premise"
description: "Understand how to set up admins based on your on-premise infrastructure with Scalefusion. This guide covers the roles, permissions, and steps for setting up on-premise admins."
updated: 2024-08-16T10:18:08Z
published: 2024-08-16T10:18:08Z
canonical: "help.scalefusion.com/admins-based-on-on-premise"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.scalefusion.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Admins based on On-Premise

With the On-Prem connector setup, IT Admins can set AD AD-based access to Scalefusion Dashboard, which means the admins can sign in to Scalefusion Dashboard with AD credentials. For this, they need to choose AD (set with OPC) as the sign-in provider.

This document covers the procedure to migrate an account to AD based account

## Prerequisites

1. Scalefusion Account with Enterprise License
2. [OPC Configuration](/docs/install-and-configure-on-premise-connector-on-a-windows-servermachine) and Integration with Scalefusion Dashboard is done
3. The user(s) to be migrated should be existing in Active Directory

## Steps

1. On the Scalefusion Dashboard, navigate to **Admins and Roles > Sign-In Settings**
2. Note that the Sign-In Provider is set as an On-Prem Connector
3. Click on **Save**  
The save button will be enabled when the On-Premise Connector’s setup is successfully completed from **Integrations > OnPrem Connector**.![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/32-1.png)
4. This brings up a dialog **Change Sign-In Provider** with the following options:
  1. **Migrate Self:** Allows the administrator to sign in to the Scalefusion dashboard with AD credentials.
  2. **Migrate Admins:** Choose the admin(s) whom you want to migrate to AD-based access![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/migrate-admins.png)

## Migrate Self

1. Clicking on Migrate Self will redirect you to the AD user's sign-in page. Enter the AD user’s credentials and **Sign In**The user should be an AD User**![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723803261877.png)**
2. Once the **Authentication succeeds**, you will get the page with a PIN. Make a note of this PIN and click **Go to Dashboard ![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-1723803339471.png)**
3. Once the PIN is confirmed, the account is marked as an **AD SSO-based account**. The next time whenever this user tries to Sign in, he/she will not be asked to enter a password because it is authenticated against the provider (AD SSO). This is also indicated on Scalefusion's Sign-In screen, where the Password field is not there.
4. After Sign-In, the user lands on **Sign-In Settings** with a dialog to select the admin accounts that he wants to migrate to use AD-based sign-in. The user can choose to **MIGRATE** or choose the option **LATER**.
5. The settings are successfully configured. On the Sign In settings page, you will see additional buttons to **Disable** and **Migrate Admins**. This indicates that the migration is successful.

## Migrate Admins

In the Change Sign In Provider dialog box, when you click on Migrate Admins, a dialog box comes up showing all those admin accounts that can be migrated to AD-based sign-in. Select the admin accounts that have to be migrated and click on **Migrate![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/migrate-admins-2.png)**

The admin gets migrated to AD-based Sign In. Select **Later** if you do not want to migrate the admins at this point in time.

In **User Management > Settings,** the setting **Enforce Users to Sign in using AD SSO** is accessible only when you migrate the owner or its admin after setting up OPC, which allows BYOD users to enroll using AD credentials![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/31-1.png)

## Disable AD-Based Access

To disable AD Based access,

1. Navigate to **Admins and Roles > Sign In Settings**
2. Under **Sign In Settings**, click on the button **DISABLE**
3. A dialog box comes up asking you to set a password. This password would be used to sign in to Dashboard once AD-based access settings get disabled. Click **Save** after entering the password.