Configure Microsoft Entra ID as CAS and IDP for ThingWorx

[SS_10840299]

We are currently using Pingfederate as CAS and Microsoft Azure Entra ID as IDP . We want to switch and only use Azure Entra ID as both CAS and IDP. We are able to authenticate users using Entra ID in thingworx but now we want to integrate windchill using integrator connectors. SO we have to setup windchill as a resource server on Entra iD or can we do it just by keeping thingworx as resoruce server. Do we have any use case that we can refer to.

I am refering this document  - https://support.ptc.com/help/identity_and_access_management/en/index.html#page/iam/AzureADasCASandIdP.html#

[Surya_Tiwari]

Hi, @SS_10840299. Take a look at the article below.

https://www.ptc.com/en/support/article/CS422292

[SS_10840299]

@Surya_Tiwari  is there a use case you can show me. I have already referred that guide.

[TonyZhang · Accepted solution]

Hi @SS_10840299 

I'm not sure what use case you are looking for.

If you want to use integration connector to connect with Windchill, basically you can use one of the following 3 ways for authentication.

See article CS397076

• Fixed Authentication
• SSO (OAuth)
• Windchill Authentication

If you want to configure OAuth using Entra ID, you will need to configure OAuth with Windchill as the Resource Server

Refer to Windchill Help Center - Configure OAuth Delegated Authorization, ThingWorx Help Center - 

Configuring Authorization with Microsoft Entra ID with ThingWorx as a Resource Server or a Different Application as a Resource Server for more information on the necessary configurations.