cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Showing results for 
Search instead for 
Did you mean: 

Thingworx 90 SSO with Windows ADFS error

Participant

Thingworx 90 SSO with Windows ADFS error

I follow the document to implement Thingworx SSO https://support.ptc.com/help/identity_and_access_management/en/index.html#page/iam/ExampleAdfsIdenti...
But when I try to loging to Thingworx . 

The ADFS server show event id 197 & 364 error.  

Does anyone know how to solve it?   

 

Thanks.
++++++++++++++++++++++++++++++++++++++++++
The Federation Service could not satisfy a token request because the accompanying credentials do not meet the authentication type requirement of 'urn:oasis:names:tc:SAML:2.0:ac:classes:password' for the relying party 'microsoft:identityserver:twx90'.
Authentication type:
Desired authentication type(s): urn:oasis:names:tc:SAML:2.0:ac:classes:password

****************************************************************error.PNGtwxError.PNG

2 REPLIES 2

Re: Thingworx 90 SSO with Windows ADFS error

Hello @tzhang11 ,

 

I would go over again the setup to check if there is some setting missing or misconfigured.

 

Have you updated and configure Tomcat to allow ThingWorx to operate in cross-domain environments.

There is an article with more details about it https://www.ptc.com/en/support/article/CS318637

Does the SSO Application Endpoint URL redirect to the IdP ?

Do you have enabled SSO from platform-settings.json ?

In the Mapping of LDAP attributes to outgoing claim types table, have you selected the values from the lists to map the ADFS attributes to the Active Directory attributes ?
    If you do not map these attributes correctly, single sign-on will not work
    https://support.ptc.com/help/identity_and_access_management/en/index.html#page/iam/ExampleAdfsIdenti...

 

Hope it helps,

 

Re: Thingworx 90 SSO with Windows ADFS error

Hi Ciprian-Traian

I follow your recommendation and re-check all configurations again.

I still got the same message. Does it possible the problem due to the ADFS server config?

Do you have any idea I can try?  Or do you need other information to help identify the problem?

 

& Thanks for your reply.

TZ.

Announcements

Thingworx Navigate content has a new home! Click here to access the new Thingworx Navigate forum!