ThingWorx with Active Directory authentication - Users are removed from non-AD groups

[pjahn]

We have a problem with the connection to Active Directory documented here: https://support.ptc.com/help/thingworx_hc/thingworx_8_hc/en/index.html#page/ThingWorx/Help/Composer/Security/DirectoryServicesAuthentication/ActiveDirectory.html

The following happens: A user account is a member of an Active Directory user group. Let's call the group "ACME ThingWorx Developers". In the directory service configuration the Active Directory group "ACME ThingWorx Developers" is mapped to the group "ThingWorx Developers". When the user logs in for the first time, the account is created accordingly. After that the user account becomes a member of a user group in ThingWorx that has no representation in Active Directory. The problem: When the user logs in to ThingWorx again, the user account is removed from the additional non-Active Directory group.

Is there a way to prevent the user account from being removed from the group?

[Ciprian-Traian]

Hello @pjahn,

Have you tried disabling the "User Modification" option  to see if AD user, who is a direct member of ThingWorx group, is removed from the group at logon ?