Configuring the Central Auth Server – Microsoft Entra ID
PTC supports Microsoft Entra ID as the Central Auth Server (CAS) and the identity provider (IdP) for Windchill 12.0.2.2 and later. The CAS manages the trust relationship between PTC products participating in the SSO framework. The CAS acts as a broker between applications by authorizing user logins, once the user has been authenticated, and by issuing and verifying access tokens that are exchanged between service providers and resource servers.
Windchill implements the following elements in the SSO framework:
1. Use SAML assertions to authenticate users.
2. After the user has been authenticated, Microsoft Entra ID presents the user with a grants approval page where it asks the user to grant permissions for use of data from the resource server application.
Before you begin working with Microsoft Entra ID to configure authentication and authorization, be sure to complete the following lists of prerequisites:
For procedural information about configuring authentication and authorization with Microsoft Entra ID, see following SSO configuration example:
Microsoft Entra ID as Central Auth Server and Identity Provider