Windchill Authentication Error after SSO configuration

[KV_10407246]

After SSO configuration, Users can access windchill UI page but getting an Authentication error while doing load commands. 

Example:

windchill wt.load.LoadFromFile -d <path to xml> -u <username> -p <password> -CONT_PATH \"/wt.inf.container.OrgContainer=<org name>\"

The operation: "getPrincipal" failed.
Nested exception is: wt.util.WTRemoteException: Unable to invoke remote method
Nested exception is: wt.method.AuthenticationException

Method server log:

ERROR [RMI TCP Connection(1797)-10.219.4.138] wt.httpgw.HTTPAuthentication - HTTP login failed: client host = xx.xxx.x.xxx

*But can load this successfully with wcadmin.

SSO Configurations:

Defined claims and attributes in idp (Azure AD)

Defined REMOTE_USER as "uid" in shibboleth2.xml file.

Defined <Attribute name="uid" id="uid"/> in attribute-map.xml file.

Windchill version 12.0.2.3

Shibboleth version 3.5.0

It seems users unable to authenticate.. If I'm missing something in SSO configuration, please let me know. Looking for response.

Thanks

[anursingh]

Hi @KV_10407246,

Thank you for your question. 

Your post appears well documented but has not yet received any response. I am replying to raise awareness. Hopefully, another community member will be able to help.
 

Regards,

Anurag