Skip to main content
A
Ascherer1716-Pearl
16-Pearl
March 19, 2019
Solved

Single Sign On (SSO) Without Ping Federate

  • March 19, 2019
  • 3 replies
  • 3616 views

Is it possible to configure SSO on ThingWorx without using PingFederate?  All the documentation seems to be forcing Ping, but if possible, we would like to simply use SAML 2.0 with a direct connection to our IdP.

For reference, we would be using ThingWorx version 8.3.

Best answer by Ascherer17

I was eventually able to set up SSO without using Ping Federate on Thingworx 8.3.3 with the help of our IdP admin.  Most of the setup was similar to the online docs, but I had to come up with the SP metadata file for ThingWorx. 

Using the ThingworxSSOAuthenticator I am also able to map LDAP groups sent by the IdP via SAML.

3 replies

M
mnarang5-Regular Member
5-Regular Member
March 19, 2019

You will need a broker in between which will handle everything which is coming from ThingWorx and in response coming from IDP .There is no OOTB way to take IDP metadata in ThingWorx and directly communicate with IDP .If you want you can try other broker like shibboleth .But PTC tested architecture of SSO involve Ping Federate only. 

 

 

 

Thanks,

Mukul Narang 

A
Ascherer1716-PearlAuthor
16-Pearl
March 19, 2019

Is there any documentation available that explains the underlying function of how SSO works in ThingWorx?  I've been through the Help Center and the SSO architecture document that discusses Thingworx, PingFederate, and Windchill.  

B
barko16-Pearl
16-Pearl
April 29, 2019

PTC has adopted PingFederate as the ThingWorx SSO solution, and so all of the documentation focuses on using PingFederate with ThingWorx. There is no SSO documentation independent of that.

P
PaiChung22-Sapphire I
22-Sapphire I
March 19, 2019

I believe you can still create custom authenticators as well

http://support.ptc.com/cs/help/thingworx_hc/thingworx_6.0_hc/index.jspx?id=thingworx060901&action=show

 

    A
    Ascherer1716-PearlAuthorAnswer
    16-Pearl
    May 20, 2019

    I was eventually able to set up SSO without using Ping Federate on Thingworx 8.3.3 with the help of our IdP admin.  Most of the setup was similar to the online docs, but I had to come up with the SP metadata file for ThingWorx. 

    Using the ThingworxSSOAuthenticator I am also able to map LDAP groups sent by the IdP via SAML.

      Terms & ConditionsCookie settingsAccessibility statement