topic SSO and Application Key in ThingWorx Developers

SSO and Application Key

pshashipreetham — Wed, 21 Dec 2022 12:26:53 GMT

Hi,

I am using the Application Key as of now to access services and Mashup for the end user. (Adding APP key in URL)
If I use the SSO moving forward, how can I access those services and Mashups now?

Thanks,

Re: SSO and Application Key

ThorstenMueller — Wed, 21 Dec 2022 13:30:39 GMT

If you want to use SSO to access these Mashups or services you would have to use an oauth token (bearer token) in your authorization.
This way you can access ThingWorx Mashups or API.
Or you can also re-enable Appkey authorization together with SSO authorization in ThingWorx.

To enable AppKey Authenticator when SSO is enabled you have to add the ApplicationKeySettings configuration to the ThingWorx sso-settings.json file located in <ThingworxPlatform>\ssoSecurityConfig:

{
 "BasicSettings": {...
			},
 "ApplicationKeySettings": {
	 "enabled": true
			},
			...
}

With this help you could still access ThingWorx with appkey even if SSO is enabled

Re: SSO and Application Key

pshashipreetham — Fri, 23 Dec 2022 09:22:05 GMT

Hi @ThorstenMueller ,

Business use case over here is like... Mashup renders under a Different Portal. We use a Mashup URL with an Application key to Render in another portal.
If I use SSO, what should I use in Place of the Application Key in the URL because Auth will not work since Mashup is a Render for that Portal.

Thanks,

Re: SSO and Application Key

Evieharper — Fri, 23 Dec 2022 11:09:58 GMT

If you want to use SSO to access these Mashups or services you would have to use an oauth token (bearer token) in your authorization. This way you can access ThingWorx Mashups or API. Or you can also re-enable Appkey authorization together with SSO authorization in ThingWorx.

Re: SSO and Application Key

VladimirRosu — Fri, 23 Dec 2022 11:35:54 GMT

@pshashipreetham

My expectation (never tested) is that if ThingWorx is setup for SSO, and when you are in that external portal you're already logged in, then you would not need to use the appKey at all, because when trying to access TW you'll use the same existing authorization token automatically, since you're already logged in via SSO.

However, it needs to be tested...

Re: SSO and Application Key

Sathishkumar_C — Tue, 03 Jan 2023 05:55:37 GMT

Tried following URL format in SSO enabled Thignworx 8.5.4 instance, it's working as expected.

https://<ThingWorxServer>:<ThingWorxPort>/Thingworx/Mashups/<MashupName>?appKey=<AppKey>&x-thingworx-session=true

Referred Accessing Mashups using Application Key (appKey) Authentication in ThingWorx

Re: SSO and Application Key

BABA-SHYAM — Wed, 03 Dec 2025 13:17:15 GMT

I know it too late but you can try https://github.com/babashyam3/Thingworx-Custom-Authentication