Skip to main content
T
tchao10-Marble
10-Marble
August 25, 2023
Question

Windchill Basic authentication and SSO together

  • August 25, 2023
  • 3 replies
  • 6736 views

Has anyone set your WC environment to have some users using Basic Authentication and some users using SSO?

There is a PTC KB article said it is doable, but it did not provide the steps.

Has anyone done ever done with this kind of configuration?

    3 replies

    jbailey
    jbailey18-Opal
    18-Opal
    August 25, 2023

    It can be done... What is the use case?

    Do you have a SAML IdP in your organization already (either internal or third party)?

    HelesicPetr
    22-Sapphire II
    HelesicPetr22-Sapphire II
    22-Sapphire II
    August 25, 2023

    Hi @jbailey 

    I have one use case.

    Users use SSO from client computers and administrator use basic login from Server side not from client computer. 

    PetrH

    jbailey
    jbailey18-Opal
    18-Opal
    August 25, 2023

    Why would administrators need to use basic login?

    HelesicPetr
    22-Sapphire II
    HelesicPetr22-Sapphire II
    22-Sapphire II
    August 25, 2023

    Hi @tchao 

    It is configurable on a HTTP Server (apache) side so I would contact Apache support for that. 

     

    in another word> I know it is possible but I've never needed it:D

    PetrH

    jbailey
    jbailey18-Opal
    18-Opal
    August 25, 2023

    It can be done with PTC provided tools as well (PingFederate). I have an entirely SAML authentication policy that allows admins to use secondary accounts for separation of duties.

      T
      tchao10-MarbleAuthor
      10-Marble
      April 8, 2025

      This can be done, but would need to separate the services (via URL link) with additional Apache configuration.  

      Terms & ConditionsCookie settingsAccessibility statement