Install, License, and Configure ThingWorx Navigate > Install ThingWorx Navigate on an Existing ThingWorx Instance > Configure ThingWorx Navigate
  
Configure ThingWorx Navigate
Windchill prerequisites
Before you begin configuring ThingWorx Navigate, ensure you meet the following requirements for Windchill:
Windchill—Check the Platform Support Matrix for ThingWorx Navigate for the supported versions and minimum CPS.
For enhanced security, we recommend configuring your Windchill server with SSL before you begin a ThingWorx Navigate installation. Refer to the Windchill Installation and Configuration Guide for instructions on how to do this.
* 
If you plan to configure your ThingWorx Navigate using the Windchill authentication, you must configure your Windchill server with SSL before you begin the installation.
For Windchill versions prior to Windchill 11.2.0.02, an enablement patch must be loaded onto the Windchill server to enable the PTC Windchill Extension for ThingWorx. Refer to the Apply a PTC Windchill Patch topic for details.
Set up your authentication
Choose one of the following three configuration options:
* 
For ThingWorx Navigate systems connected to SAP as well as to Windchill, only Single Sign-on is supported.
Single Sign-on (SSO)—We recommend using Single Sign-on authentication. Your users can use a single login to access multiple enterprise applications. PTC supports industry SSO standards and has incorporated PingFederate as an SSO solution.
Windchill Authentication—This configuration uses Windchill authentication for ThingWorx.
Fixed—You can use this configuration as a fast, alternative system setup for testing. Or, you can use it to demonstrate ThingWorx Navigate functionality. It is not secure, and fixed authentication should never be used in production.