API for updated LDAP authentication Principal Name password

[Daniel_KCC]

Hi folks,

We have a thingworx instance per mill (around 70)... On the FactoraWindowsAuthenticator service we have defined the AD user to connect to LDAP to validate operators logins. these users (one per mill) has its password expired every couple of months, so every time somebody need to logon to thingworx composer and update the password (see image attached)

So we were looking a way to update via APIs to be triggered by a BOT, I found in this link (https://support.ptc.com/help/thingworx_hc/javadoc_8/)

Class: com.thingworx.security.authentication.Authenticator

Method:  setCredentials

A) Im not sure if this is the correct method to update principal name password

B) If it is, I'm not sure how to call it.. I've been trying to do some test from postman without luck.

anyone looking for the same and that came across same requirement?

[slangley]

Hi @DS_10150612.

Is it possible for you to set up the Administrator account as a service account that isn't susceptible to the global password expiration policy in your authenticator?  Have you considered using another authentication method that isn't susceptible to this, such as SSO?

The API update method would be more susceptible to security violations, so it's not recommended.

Regards.

--Sharon