Hi,
Nowadays, most of the customers use Windchill at least connected to the corporate directory (Active Directory).
Installing a third party LDAP is still required for "administrative" accounts like super-users or administrators. So most of the users' credentials are safe (as long as SSL is configured).
Knowing that Windchill DS was based on OpenDJ / OpenDS, there is no much changes. You might have noticed lot of similarities.
If the fact that OpenDJ is an open-source concerns you, don't forget Apache HTTPServer is an open-source as well as the JDK you most likely installed to run Windchill.
