Thingworx Navigate SSO with Okta, and only Okta

[Dan_WC_EDA]

Hello, 

I was wondering if anyone has setup Thingworx Navigate to use SSO but only using Okta as the IDP and CAS. We're working on implementing SSO in our Windchill environments and thus our Thingworx Nav would need to be switched to SSO as well, since it integrates with Windchill. 

Our company has decided we will not use Ping Federate or another CAS and thus only Okta will be used for SSO. We've discussed this with PTC and they said that this is possible to do, but since it's not supported (without Ping Federate) they won't help, so we're on our own trying to set this up.  

I'm more looking for guidance and what info would be needed to send to the Okta group so they can setup the app on their end to talk to Thingworx Navigate. 

Thanks!  

[VladimirN]

Same question - "Thingworx SSO with Ping and OKTA": https://community.ptc.com/t5/ThingWorx-Developers/Thingworx-SSO-with-Ping-and-OKTA/td-p/762699 

[Dan_WC_EDA]

Appreciate the link to the other question but it's not the same, the links from that are still referencing PingFederate being used in some capacity. We are NOT using PingFederate. 

I will keep digging. 

[SR_11566242]

Hi @Dan_WC_EDA 

Any luck with this setup ? I have the same query.

[Dan_WC_EDA]

Still working on this. Our first plan was to use Okta with SAML2 for SSO, but due to many issues with that, we've decided to use OIDC for SSO instead, still using Okta.

We've had to upgrade our Navigate to 9.7 to get OIDC to work, and the initial log in is able to work thru Okta in Navigate, now we have other issues, such as Navigate not pulling information from Windchill. 
If/when we can get this working, I can give more details.