Getting Started with ThingWorx Navigate > Installing ThingWorx Navigate
  
Installing ThingWorx Navigate
* 
If you already have the ThingWorx platform installed, and then you add ThingWorx Navigate later, you will need to get a new license for ThingWorx that includes the license for ThingWorx Navigate. For instructions, see the document “Installing ThingWorx 8.2” on the Reference Documents page for ThingWorx.
The installation procedure depends on instructions from different sources, you may have to switch between a few documents. This way, we can ensure that you’ll always have the most up-to-date information.
Installation and Configuration Options
Choose one of the following three configuration options:
* 
For ThingWorx Navigate systems connected to SAP as well as to Windchill, only Single Sign-on is supported.
Option 1: ThingWorx Navigate with Single Sign-on with PingFederate
We recommend this configuration option. It is the most secure.
Single Sign-on allows for ThingWorx Navigate users to be authenticated to ThingWorx Navigate and other federated systems using a single login, which allows for ease of application access without having additional login prompts. This configuration uses PingFederate to enable modern Identity and Access Management within your existing Single Sign-on infrastructure via standard security protocols (SAML 2.0/OAUTH 2.0).
1. Install ThingWorx with the required Database.
2. Define allowable file download types in the <installation directory>\ThingworxPlatform\platform-settings.json file. Refer to Set File Download Types for details.
3. Configure ThingWorx Navigate for Single Sign-on with PingFederate.
During Configuration of ThingWorx for Single Sign-on, you will be required to install ThingWorx Navigate. When required proceed to Import ThingWorx Navigate related extensions.
4. Optional: Configure ThingWorx Navigate with SAP system.
Option 2: ThingWorx Navigate with Windchill Authentication
A lightweight setup between ThingWorx Navigate and Windchill. In this configuration Windchill handles the authentication of each user’s login credentials.  User identity management relies on secure communications (i.e. 2-way SSL) between ThingWorx Navigate and Windchill.
1. Install ThingWorx with the required Database.
2. Define allowable file download types in the <installation directory>\ThingworxPlatform\platform-settings.json file. Refer to Set File Download Types for details.
3. Set up the Integration Runtime.
4. Import ThingWorx Navigate related extensions.
5. Configure ThingWorx Navigate with Windchill Authentication.
Option 3: ThingWorx Navigate with Fixed Account Authentication (Non-production systems only)
A setup integration which can be used to quickly setup demonstration or proof of concept environments.
This configuration is not secure. Do not use it for production environments.
1. Install ThingWorx with the required Database.
2. Define allowable file download types in the <installation directory>\ThingworxPlatform\platform-settings.json file. Refer to Set File Download Types for details.
3. Set up the Integration Runtime.
4. Import ThingWorx Navigate related extensions.
5. Configure ThingWorx Navigate with Fixed Account Authentication.