Getting Started with ThingWorx Navigate > Installing ThingWorx Navigate > Configure ThingWorx Navigate with Single Sign-on with PingFederate
  
Configure ThingWorx Navigate with Single Sign-on with PingFederate
We recommend configuring your ThingWorx Navigate with Single Sign-on (SSO). This setup is the most secure.
If you are configuring Single Sign-on for the first time, read the SSO overview topic in PTC Single Sign-on Architecture and Configuration Overview Guide.
In this SSO configuration, users of ThingWorx Navigate, which runs on the ThingWorx platform, authorize ThingWorx Navigate to access their data in Windchill. ThingWorx Navigate users are able to access their Windchill data from the Navigate application with only one login.
To configure ThingWorx for Single Sign-on, follow the instructions in “Scenario: ThingWorx as a Service Provider and Windchill as a Resource Provider” in PTC Single Sign-on Architecture and Configuration Overview Guide. This guide provides instructions and several Identity Provider configuration examples.
* 
During configuration of ThingWorx for Single Sign-on, you will be required to install ThingWorx Navigate. When required, proceed to Import ThingWorx Navigate related extensions.
Continue to the next step in your installation sequence at Installing ThingWorx Navigate.