Getting 401 Password Mismatch error from Windchill after switching to SSO

[avillanueva]

I have reconfigured out test Windchill instance to SSO and am getting some final errors with Navigate pulling data from Windchill. Authentication uses Windchill so I was able to see the redirect to Windchill, authenticate and I am properly authenticated. Testing view documents, I was able to search on a document, see proper returns and even a document thumbnail. This should mean I am getting a proper connection back to Windchill to retrieve data. 

When I get the document details, I get back a few errors and no details appear. Same is true for the other apps for CAD data and parts (BOMS do appear).

The error is clearly shown in the webserver logs as a 401 password mismatch error:

[Mon Sep 09 09:17:45.107851 2024] [auth_basic:error] [pid 232273:tid 140186213984000] [client 127.0.0.1:35360] AH01617: user <username>: authentication failure for "/Windchill/trustedAuth/servlet/odata/v5/DocMgmt/Documents('OR:wt.doc.WTDocument:1742513238')": Password Mismatch
[Mon Sep 09 09:17:45.107941 2024] [auth_basic:error] [pid 232273:tid 140186213984000] [client 127.0.0.1:35360] AH01617: user <username>: authentication failure for "/Windchill/webserver/apache/error/apachelogin.html": Password Mismatch
[Mon Sep 09 09:17:45.253767 2024] [auth_basic:error] [pid 232273:tid 140186465765120] [client 127.0.0.1:35360] AH01617: user <username>: authentication failure for "/Windchill/trustedAuth/servlet/odata/v5/DocMgmt/Documents('OR:wt.doc.WTDocument:1742513238')": Password Mismatch
[Mon Sep 09 09:17:45.253875 2024] [auth_basic:error] [pid 232273:tid 140186465765120] [client 127.0.0.1:35360] AH01617: user <username>: authentication failure for "/Windchill/webserver/apache/error/apachelogin.html": Password Mismatch
[Mon Sep 09 09:19:17.976116 2024] [auth_basic:error] [pid 232273:tid 140186155235072] [client 127.0.0.1:39672] AH01617: user <username>i: authentication failure for "/Windchill/trustedAuth/servlet/odata/v3/CADDocumentMgmt/CADDocuments('OR:wt.epm.EPMDocument:1353920839')": Password Mismatch
[Mon Sep 09 09:19:17.976917 2024] [auth_basic:error] [pid 232273:tid 140186155235072] [client 127.0.0.1:39672] AH01617: user <username>: authentication failure for "/Windchill/webserver/apache/error/apachelogin.html": Password Mismatch
[Mon Sep 09 09:19:20.003522 2024] [auth_basic:error] [pid 232272:tid 140186591655680] [client 127.0.0.1:39688] AH01617: user <username>: authentication failure for "/Windchill/trustedAuth/servlet/odata/v3/CADDocumentMgmt/CADDocuments('OR:wt.epm.EPMDocument:1353920839')": Password Mismatch
[Mon Sep 09 09:19:20.003774 2024] [auth_basic:error] [pid 232272:tid 140186591655680] [client 127.0.0.1:39688] AH01617: user <username>: authentication failure for "/Windchill/webserver/apache/error/apachelogin.html": Password Mismatch
[Mon Sep 09 09:19:24.041105 2024] [auth_basic:error] [pid 232273:tid 140185609709312] [client 127.0.0.1:59028] AH01617: user <username>: authentication failure for "/Windchill/trustedAuth/servlet/odata/v3/CADDocumentMgmt/CADDocuments('OR:wt.epm.EPMDocument:1353920839')": Password Mismatch
[Mon Sep 09 09:19:24.041208 2024] [auth_basic:error] [pid 232273:tid 140185609709312] [client 127.0.0.1:59028] AH01617: user <username>: authentication failure for "/Windchill/webserver/apache/error/apachelogin.html": Password Mismatch

My username appears ok (redacted), but strange that it is reporting [auth_basic:error]. Did my session get flipped to being basic authentication. Now, I do have Windchill setup with an alternate basic authentication following CS372501. Why would the auth scheme flip like this?

[avillanueva · Accepted solution]

I was almost ready to post the above when I noticed the note in the article I posted above: 

• Note: This configuration breaks ThingWorx Navigate configured with Windchill authentication

Ok, I removed that configuration from my .conf file, restarted and bang, it now works. Great. I continued with the previous post to document the issue for others since it was not obvious that it was the cause when I first saw it.  I still have a question as to why? I'd be curious to know what is going on behind the scenes here. Marking this closed for me.