Skip to main content
16-Pearl
October 13, 2020
Question

ThingWorx with Active Directory authentication - Users are removed from non-AD groups

  • October 13, 2020
  • 1 reply
  • 3649 views

We have a problem with the connection to Active Directory documented here: https://support.ptc.com/help/thingworx_hc/thingworx_8_hc/en/index.html#page/ThingWorx/Help/Composer/Security/DirectoryServicesAuthentication/ActiveDirectory.html

 

The following happens: A user account is a member of an Active Directory user group. Let's call the group "ACME ThingWorx Developers". In the directory service configuration the Active Directory group "ACME ThingWorx Developers" is mapped to the group "ThingWorx Developers". When the user logs in for the first time, the account is created accordingly. After that the user account becomes a member of a user group in ThingWorx that has no representation in Active Directory. The problem: When the user logs in to ThingWorx again, the user account is removed from the additional non-Active Directory group.

Is there a way to prevent the user account from being removed from the group?

 

1 reply

5-Regular Member
October 15, 2020

Hello @pjahn,

 

Have you tried disabling the "User Modification" option  to see if AD user, who is a direct member of ThingWorx group, is removed from the group at logon ?