When using PingFederate Single Sign-on (SSO), retrieving data from Windchill PDMLink via OAuth 2.0 "Access is denied. You are not a registered Windchill user."

• In ThingWorx Navigate SSO users fail to retrieve data from Windchill with error

wt.licenseusage.licensing.LicensingException: Access is denied. You are not a registered Windchill user.

• When users access My Tasks App they see error pop up/RED bars
• Unable to pull data with valid OAuth token from 3rd party tool
• ThingWorx Navigate does not load data from Windchill correctly
• Cannot get data from Windchill PDMLink via ptc-windchill-integration-connector, ptc-windchill-OData-connector, or custom Integration Connectors
• Enabled SSO and ThingWorx Navigate and/or Integration Connectors no longer work
• User exists in both ThingWorx Platform and Windchill PDMLink with correct permissions but getting permission error when attempting to access data from ThingWorx Platform
• Executing a service manually from a custom Integration Connector, results in the following:

Execution error in service script [<Service>] :: The server sent HTTP status code 500: 500]

• Error in <ThingworxStorage>\logs\ApplicationLog.log:

[L: ERROR] [O: c.p.n.w.e.p.WindchillEntityProvider] [I: ] [U: <username>] [S: ] [P: ] [T: https-openssl-nio-443-exec-1] Unable to invoke service WorkItem_GET_ByID on connector ptc-windchill-OData-connector. Error message: Your route exchange has failed.  HTTP operation failed with status [500 - 500]
[L: ERROR] [O: c.p.n.WCAdapterInstance] [I: ] [U: <username>] [S: ] [P: ] [T: https-openssl-nio-443-exec-1] Error in getActionsForItem - Unable to invoke service WorkItem_GET_ByID on connector ptc-windchill-OData-connector. Error message: Your route exchange has failed.  HTTP operation failed with status [500 - 500]
[L: ERROR] [O: c.p.n.c.u.ServiceUtilities] [I: ] [U: <username>] [S: ] [P: ] [T: https-openssl-nio-443-exec-1] Unable to execute service GetActionsForItem: Error in getActionsForItem - Unable to invoke service WorkItem_GET_ByID on connector ptc-windchill-OData-connector. Error message: Your route exchange has failed.  HTTP operation failed with status [500 - 500]
[L: ERROR] [O: c.p.n.c.p.b.ProgressBusinessLogic] [I: ] [U: <username>] [S: ] [P: ] [T: https-openssl-nio-443-exec-1] Unable to fetch user event list from backend system Unable to execute service GetActionsForItem: Error in getActionsForItem - Unable to invoke service WorkItem_GET_ByID on connector ptc-windchill-OData-connector. Error message: Your route exchange has failed.  HTTP operation failed with status [500 - 500] 
[L: ERROR] [O: c.p.n.c.t.TaskProgressBusinessLogic] [I: ] [U: <username>] [S: ] [P: ] [T: https-openssl-nio-443-exec-1] Unable to fetch user event list from backend system Unable to execute service GetActionsForItem: Error in getActionsForItem - Unable to invoke service WorkItem_GET_ByID on connector ptc-windchill-OData-connector. Error message: Your route exchange has failed.  HTTP operation failed with status [500 - 500] 
[L: ERROR] [O: c.p.n.c.p.b.ProgressBusinessLogic] [I: ] [U: <username>] [S: ] [P: ] [T: https-openssl-nio-443-exec-1] Unable to calculate progress for Task progress : Unable to fetch user event list from backend system Unable to execute service GetActionsForItem: Error in getActionsForItem - Unable to invoke service WorkItem_GET_ByID on connector ptc-windchill-OData-connector. Error message: Your route exchange has failed.  HTTP operation failed with status [500 - 500] 
[L: ERROR] [O: c.p.n.c.t.TaskProgressBusinessLogic] [I: ] [U: <username>] [S: ] [P: ] [T: https-openssl-nio-443-exec-1] Unable to calculate progress for Task progress : Unable to fetch user event list from backend system Unable to execute service GetActionsForItem: Error in getActionsForItem - Unable to invoke service WorkItem_GET_ByID on connector ptc-windchill-OData-connector. Error message: Your route exchange has failed.  HTTP operation failed with status [500 - 500]

• Error in IRLogs\IntegrationRuntime.log:

[ClientProcessor-2] ERROR c.t.i.r.IntegrationEngine - Exchange process failed with exception thrown : Your route exchange has failed.  HTTP operation failed with status [500 - 500]
java.lang.RuntimeException: Your route exchange has failed.  HTTP operation failed with status [500 - 500]
    at com.twx.integration.route.exceptions.ExceptionHelper.convertToRuntimeException(ExceptionHelper.java:77)
    at com.twx.integration.route.IntegrationEngine.dispatchRoute(IntegrationEngine.java:159)
    at com.twx.integration.client.things.IntegrationRuntimeServer.Invoke(IntegrationRuntimeServer.java:72)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at com.thingworx.common.processors.ReflectionProcessor.processService(ReflectionProcessor.java:261)
    at com.thingworx.communications.client.things.VirtualThing.invokeService(VirtualThing.java:1120)
    at com.thingworx.communications.client.things.VirtualThing.handleServiceRequest(VirtualThing.java:1028)
    at com.thingworx.communications.client.ConnectedThingClient.handleRequest(ConnectedThingClient.java:315)
    at com.thingworx.communications.client.processor.ClientProcessorTask.run(ClientProcessorTask.java:55)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
    at java.util.concurrent.FutureTask.run(FutureTask.java:266)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:748)

• Error in <Windchill>\logs\MethodServer log:

ERROR [ajp-nio-127.0.0.1-8010-exec-8] wt.licenseusage.StandardLicenseUsageService  - (wt.licenseusage.licenseUsageResource/INVALID_USER_LOGIN) wt.licenseusage.licensing.LicensingException: Access is denied. You are not a registered Windchill user.
ERROR [ajp-nio-127.0.0.1-8010-exec-8] wt.servlet.ServletRequestMonitor.request  - 2020-07-27 12:09:26.169 +0100, 4eiibp7k;kd4ene5e;2780;cqjtxn;2023, <name>, 10.10.10.100, /Windchill/oauth/servlet/odata/v2/Workflow/WorkItems('OR%3Awt.workflow.work.WorkItem%3A125646'), %24select=ID%2CRole%2FDisplay%2CStatus%2FDisplay%2CStatus%2FValue&%24expand=Activity%28%24select%3DDeadline%2CName%29%2CSubject%28%24select%3DSubjectName%29, GET, 500, 0.03125, 0.0750976
wt.session.SessionUsers$PreLoginException: wt.licenseusage.licensing.LicensingException: Access is denied. You are not a registered Windchill user.
    at wt.session.SessionUsers.put(SessionUsers.java:622)
    at wt.session.SessionUsers.cacheSessionUser(SessionUsers.java:580)
    at wt.session.SessionUsers.auditUser(SessionUsers.java:510)
    at wt.session.TransientSessionAuthenticator.<init>(TransientSessionAuthenticator.java:42)