Configure ThingWorx for Single Sign-On

ThingWorx Model Definition in Composer > Security > Single Sign-on Authentication > Configure ThingWorx for Single Sign-On

Complete the following tasks to enable single sign-on (SSO) in ThingWorx:

1. Create the ssoSecurityConfig Folder.

2. Add the IdP Metadata File.

3. Create the symmetric Folder.

4. Configure the platform-settings.json File.

5. Configure the sso-settings.json File.

If you have installed ThingWorx Flow on a ThingWorx Foundation instance that you are configuring for SSO, you must stop all ThingWorx Foundation and ThingWorx Flow services, including RabbitMQ and Nginx, before you configure the sso-settings.json file. After configuring this file, you must restart RabbitMQ first, and then all ThingWorx Foundation and ThingWorx Flow services, including Nginx.

6. Configure the validation.properties File.

7. Import Certificates to Keystore File.

If you have installed ThingWorx Flow on a ThingWorx Foundation instance that you have configured for SSO, you must access the ThingWorx Foundation instance through the ThingWorx Flow Nginx host name. For example: https://<ThingWorx Flow Nginx host-name>:<ThingWorx Flow Nginx port-number>/Thingworx.

It is highly recommended that you validate the configuration settings required for your enterprise in a test environment before configuring your production environment.

For some of the settings used in the ThingWorx SSO configuration steps, you will need to obtain values from your PingFederate installation.

Was this helpful?