cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Showing results for 
Search instead for 
Did you mean: 

Single Sign-On for Windchill with Apache, Shibboleth, and ADFS - Has Anyone Done This Before?

Re: Single Sign-On for Windchill with Apache, Shibboleth, and ADFS - Has Anyone Done This Before?

Brian,

Great post.  Did you ever get the CAD Worker Publishing working?  We are testing double authentication using crypto cards and Shibboleth.  Did you manage to get the CAD Worker to run?  Did you get Creo 3.0 to use a basic authentication and how?

Thanks.

Robert.

Re: Single Sign-On for Windchill with Apache, Shibboleth, and ADFS - Has Anyone Done This Before?

we have the cad workers all publishing now. Creo was the outlier and it took us a while to figure out that it authenticates differently than the wgm.

Re: Single Sign-On for Windchill with Apache, Shibboleth, and ADFS - Has Anyone Done This Before?

hi ,

 

We are configuring Windchill sso with PingFederate as Identity Provider.

Can anyone please describe the steps to accomplish the task.

 

ThankYou,

madhu

Re: Single Sign-On for Windchill with Apache, Shibboleth, and ADFS - Has Anyone Done This Before?

Hello Thomas,

 

"The workaround solution we have is to write a SSO Turn On and Turn Off script at Apache level, but it is not perfect!  (and it defect the original purpose)."

 

I have configured SSO Shibboleth SP/Windchill 11.1 to Azure Idp.  What I see with SSO set up is that all users must be in the Idp.  Meaning Loaders, etc.. or just logging in as a windchillDS user such as wcadmin is impossible.

Would you be able to provide your workaround?  Or did you come up with a better solution?

 

Brian Sullivan