Install, License, and Configure ThingWorx Navigate > Install ThingWorx Navigate on an Existing ThingWorx Instance > Configure ThingWorx Navigate > Set Up ThingWorx Navigate with Single Sign-on
  
Set Up ThingWorx Navigate with Single Sign-on
We recommend configuring your ThingWorx Navigate with Single Sign-on (SSO). This setup is the most secure.
If you are configuring Single Sign-on for the first time, read the SSO overview topic in PTC Single Sign-on Architecture and Configuration Overview Guide.
In this SSO configuration, users of ThingWorx Navigate, which runs on the ThingWorx platform, authorize ThingWorx Navigate to access their data in Windchill. ThingWorx Navigate users are able to access their Windchill data from the Navigate application with only one login.
To configure ThingWorx for Single Sign-on, follow the instructions in “Scenario: ThingWorx as a Service Provider and Windchill as a Resource Provider” in PTC Single Sign-on Architecture and Configuration Overview Guide. This guide provides instructions and several Identity Provider configuration examples.
Configure the ptc-windchill-OData-connector to connect to Windchill OData REST services. Refer to the "Single Sign-on" section of Executing Info*Engine services with the OData Connector for detailed instructions.