Skip to main content
Ascherer17
Ascherer1716-Pearl
16-Pearl
January 14, 2020
Solved

SSO Provisioning Exclusions

  • January 14, 2020
  • 3 replies
  • 1651 views

We have ThingWorx 8.4.0 and the Manufacturing Apps.  We are also using SSO to log in our users.  Provisioning is set up to provide the email address from our identity provider (IDP).  The Apps require users to have a phone number included.  I've manually added phone numbers for a few users, but it seems that every time a user logs in, their phone number is deleted.  I'm guessing this is because we aren't provisioning it through SSO.

 

Is there a way to set exclusions for the SSO attribute provisioning?

Best answer by raluca_edu
Yes, specific attributes cannot be excluded.

3 replies

raluca_edu
raluca_edu17-Peridot
17-Peridot
January 15, 2020

Hi,

 

You can use User Provision Exclusion List:

 

  1. In ThingWorx Composer, go to Security> Authenticators
  2. Select ThingworxSSOAuthenticator and go to Entity Information> Configuration 
  3. Add the users in User Provisioning Exclusion List 

But this will mean that the users from User Provision Exclusion List will not get any info through SSO.

Any attribute that is manually updated in Thingworx for users will be overwritten by info coming from IDP at each login. One way will be to get also the phone number together with email address from IDP. 

 

Hope it helps,

Raluca Edu

Ascherer17
Ascherer1716-PearlAuthor
16-Pearl
January 15, 2020

User exclusion list will not work since we would like to get attributes from IDP.  I did work with our IDP admin to send the phone number.  That solves my issue.  However this doesn't answer the question of this post.  Right now I'm assuming the answer is No, specific attributes cannot be excluded.

raluca_edu
raluca_edu17-PeridotAnswer
17-Peridot
January 15, 2020
Yes, specific attributes cannot be excluded.
Terms & ConditionsAccessibility statement