Thingworx Users provisioning using Winchill Authenticator

[PreetiGupta]

In our ThingWorx Navigate platform, we have Windchill Auth configured (

ptc-identity-provider-authenticator), which can create user automatically and add users to ThingWorx groups. 

We have a requirements for few apps where we can not give access to all the ThingWorx platform users to get access. Only subset of the ThingWorx Platform users can use these apps. 

I am looking for ideas how to automate user provisioning for these apps. Right now we are manually adding users into ThingWorx groups.

[Arpit-Singh]

The Windchill Auth has a known limitation: It only relies on the User ID and has no other attributes for determining automatic group assignments in Thingworx Navigate Configuration.

When utilizing the SSO Authenticator, it is possible to automate group assignments in Thingworx Navigate based on the group attributes received in the SAML Assertion. This can be achieved by configuring the group attributes in the assertion to facilitate automated group assignments within Thingworx Navigate.

[anursingh]

Hi @PreetiGupta,

I wanted to see if you got the help you needed.

If so, please mark the appropriate reply as the Accepted Solution. It will help other members who may have the same question.
Of course, if you have more to share on your issue, please pursue the conversation. 

Thanks,
Anurag