Upgrading ThingWorx Navigate > Architecture of Windchill Authentication
  
Architecture of Windchill Authentication
Use the authentication filter and authenticator extension provided by PTC to implement a Windchill Authentication configuration for users accessing a ThingWorx application that is connected to Windchill.
In this overview, the Windchill server is the remote IdP. The authentication filter and authenticator extension are installed in ThingWorx.
The architecture consists of two components:
PTC Identity Provider Authentication Filter – Tomcat filter for authentication; the filter redirects unauthenticated users to the IdP and validates the key.
PTC Identity Provider Authenticator Extension – ThingWorx extension for authentication; the extension includes dynamic user creation and setting home mashup.