Install, License, and Configure ThingWorx Navigate > Install ThingWorx Navigate on an Existing ThingWorx Instance > Configure ThingWorx Navigate > Set Up ThingWorx Navigate with Windchill Authentication > Add Servlet Filters to Tomcat Configuration
  
Add Servlet Filters to Tomcat Configuration
Using the Windchill IDP authentication filter, the ThingWorx unauthenticated user is redirected to the Windchill login form for authentication credentials. After successful authentication, the ThingWorx application received a key and user name.
The filter is configured on the ThingWorx side in the web.xml that is under the ThingWorx Tomcat installation directory. Use the following steps:
1. Stop Apache Tomcat and Integration Runtime.
2. Copy ptc-identity-provider-authentication-filter-{version}.jar from the idp folder in the ThingWorx-Navigate-Release-<version>-bundle.zip to the WEB-INF/lib directory that is under the ThingWorx Tomcat installation directory.
3. Go to the web.xml file in: Tomcat-install\webapps\Thingworx\WEB-INF\web.xml.
4. Make a copy of the web.xml file from Tomcat-install\webapps\Thingworx\WEB-INF and save it somewhere else.
5. Replace the web.xml in Tomcat-install\webapps\Thingworx\WEB-INF with web.xml from ThingWorx-Navigate-Release-<version>-bundle\idp\twx-8.5.x.
6. Open web.xml and add your Windchill Server details in [http or https]://[windchill-host]:[windchill-port]/windchill-web-app] in the filters: IdentityProviderAuthenticationFilter and IdentityProviderKeyValidationFilter.
7. Start Tomcat and Integration Runtime.
* 
After defining the value of authparam in web.xml of Windchill, the out-of-the-box value is no longer valid. To fetch the correct data, change the value of Session User Query Parameter in ptc-windchill-integration-connector-proxy.