SSO with PingFederate vs REST call

[pwykowski]

Hi Devs,

I have a working SSO configuration using PingFederate - I can log in with the user from my IdP.

The problem I have is the REST API call using AppKey. I created appKey and assigned it to the user. When I try to call service using REST, as a response I get the HTML page from PingFederate with a HTML form and Base64 encoded SAML request as an input in that form.

What I expected was the regular REST call bypassing the SSO.

Is there a possibility to overcome SSO when calling REST?

Thingworx 8.2

[bkarwowski · Accepted solution]

There is a support article https://www.ptc.com/en/support/article?n=CS279189 describing steps needed.

But basicaly You need to modify sso-settings.json:

{
    "BasicSettings": {
        ...
    },
    "ApplicationKeySettings": {
        "enabled": true
    },
...
}

 to have  ApplicationKeySettings.enabled=true