Skip to main content
tchao10-Marble
10-Marble
August 25, 2023
Question

Windchill Basic authentication and SSO together

Has anyone set your WC environment to have some users using Basic Authentication and some users using SSO?

There is a PTC KB article said it is doable, but it did not provide the steps.

Has anyone done ever done with this kind of configuration?

    22 replies

    jbailey
    jbailey18-Opal
    18-Opal
    August 25, 2023

    It can be done... What is the use case?

    Do you have a SAML IdP in your organization already (either internal or third party)?

    Translate
    HelesicPetr
    HelesicPetr22-Sapphire II
    22-Sapphire II
    August 25, 2023

    Hi @jbailey 

    I have one use case.

    Users use SSO from client computers and administrator use basic login from Server side not from client computer. 

    PetrH

    Translate
    jbailey
    jbailey18-Opal
    18-Opal
    August 25, 2023

    Why would administrators need to use basic login?

    Translate
    HelesicPetr
    HelesicPetr22-Sapphire II
    22-Sapphire II
    August 25, 2023

    Hi @tchao 

    It is configurable on a HTTP Server (apache) side so I would contact Apache support for that. 

     

    in another word> I know it is possible but I've never needed it:D

    PetrH

    Translate
    jbailey
    jbailey18-Opal
    18-Opal
    August 25, 2023

    It can be done with PTC provided tools as well (PingFederate). I have an entirely SAML authentication policy that allows admins to use secondary accounts for separation of duties.

    Translate
      tchao10-MarbleAuthor
      10-Marble
      April 8, 2025

      This can be done, but would need to separate the services (via URL link) with additional Apache configuration.  

      Translate
      Terms & ConditionsAccessibility statement