Basic Customization > Windchill Customization Basics > Guidelines for Using ThingWorx Navigate with Windchill+
  
Guidelines for Using ThingWorx Navigate with Windchill+
The following guidelines are designed to help ensure ThingWorx environments and projects securely integrate with Windchill+. Make sure you review these guidelines before creating any custom applications and integrating ThingWorx Navigate with Windchill+.
Mandatory
Hosting all instances (development, QA, and production) on the PTC Cloud.
Adhering to WRS and Windchill+ customization guardrails (including secure coding practices). For details, review Guiding Principles and Best Practices for Windchill+.
For custom applications:
Building custom applications using ThingWorx Navigate web components or ThingWorx widgets from the Standard category. For detailed steps, refer to the Use ThingWorx Navigate Components in a Custom Task topic from the ThingWorx Navigate Help Center.
Building custom applications using the OData connector with Windchill REST Services to communicate with Windchill.
Publishing custom applications only to the CUSTOM TASKS COLLECTION.
Allowed
Opening ThingWorx mashups in a popup window. For more information, see the section “Popup vs Embedded in Page” in Creating a new ThingWorx Action in the Model.
Using the out-of-the-box ThingView widget that is bundled with ThingWorx Navigate, with no customizations made to the widget.
* 
When ThingWorx is SSO enabled, embedding ThingWorx mashups is not supported within Windchill tabs.
Prohibited
* 
As additional capabilities are gradually added to Windchill+, these prohibitions will be relaxed.
Accessing the ThingWorx database.
Connecting with systems or databases other than Windchill.
Connecting to any device.
Connecting via a VPN (Virtual Private Network).
Allocating, using, or editing App Keys.
Modifying or deleting users and App Keys that PTC creates using automation.
Using third-party and custom extensions (including Java Services) and libraries, excluding the ones supported and utilized in Windchill+ and ThingWorx. PTC recommends updating to the latest maintenance release version of the third-party dependencies, to ensure compliance with the latest security updates. For details, review the ThingWorx Maintenance Release Policy for 3rd-Party Software article.
Duplicating ThingWorx Navigate entities or using them in custom applications in production.
Creating and using custom widgets.
Connecting external systems or devices to the ThingWorx REST API. Customers must authenticate via Atlas IAM to access the ThingWorx REST API.
Using ThingWorx Solution Central for deploying custom applications.
* 
Contact PTC for configuring filters in ThingWorx. After the filters are configured, you can create action models by referring to Find the Action Model to Update.