Azure AD and Thingworx SSO configuration

Question

Hi all,
 
I'm trying to configure SSO for Thingworx, I followed this link, I got stuck at 'Browser SSO' configuration. (PFB PNG for reference)

Could any one help me with this.
 
Thanks in advance
 
/VR

raluca_edu · Accepted Answer

Hi,

Steps to create a self-signed Application Layer certificate for PingFederate

On the Digital Signature Settings, click on Manage Certificates
1. On the Manage Digital Signing Certificate click on Create New
  1. Fill in the mandatory fields like
    1. Common Name = PingFederate
    2. Organization = your organization

Country = your country

Validity = 3650

Leave rest values as default and click Next
Click Done on the Summary page

Click Save on the Manage Digital Signing Certificate Page

You will be now back to Digital Signature Settings Page

Click on the checkbox “INCLUDE THE CERTIFICATE IN THE SIGNATURE <KEYINFO> ELEMENT.”

Click Next on the Digital Signature Settings Page
On the Signature Verification Settings tab, click on Manage Signature Verification Settings
1. On the Trust Model, select “UNANCHORED”
2. On the Signature Verification Certificate, select the Thingworx SP Signing Certificate and click Next.

When you visit this tab for the first time, there will be no certificate in the dropdown list. You can import the public part of the Thingworx signing certificate and choose it as Signature Verification Certificate

Click Done on the Summary page

raluca_edu · Answer

Hi,

Follow these steps:

In the PingFederate GUI navigate to the IDP Configuration page and locate the SP Connections section and click Create New.
On the Connection Type tab, select the Browser SSO Profiles option to specify SAML 2.0 protocol.
On the Connection Options tab, confirm Browser SSO is selected and click Next.
On the Import Metadata tab, None should be selected. Click Next to accept this default.
On the General Info tab, perform the following:
1. Set Partner’s Entity ID (Connection ID) to a unique value. Make a note of this ID because you will use it when configuring the ThingWorx ssosettings.json file.
2. Provide a descriptive name for the Connection Name This is the name that will be displayed in the PingFederate SP Connection list.
3. Set Base URL to the URL where your web application (ThingWorx) service provider is hosted.

Example: http://<hostname>:8080

On the Browser SSO tab, click Configure Browser SSO and perform the following instructions:
1. On the SAML Profiles tab, select IDP-INITIATED SSO and SP-INITIATED SSO. Do not select any options in the Single Logout (SLO) Profiles column.
2. On the Assertion Lifetime tab, specify:
  1. Minutes Before: 60
  2. Minutes After: 480

.......

Hope it helps,

Raluca Edu

Sign up

Please use your PTC eSupport account.

Welcome to the PTC Community

Please use your PTC eSupport account.

Scanning file for viruses.

This file cannot be downloaded