Article - CS404868
Executing ValidateConnection service fails for all connectors including OOTB (out of the box) and custom connectors in Thingworx Navigate
Modified: 06-Aug-2025
Applies To
- Windchill Navigate (formerly ThingWorx Navigate) 1.5.0 to 10.0
Description
- Executing ValidateConnection service fails for all connectors including OOTB (out of the box) and custom connectors
- Executing ValidateConnection service fails immediately with below error Failed as shown below:
- Security log reports following error:
[L: WARN] [O: S.c.t.s.a.s.ThingworxSSOAuthenticator] [I: ] [U: ] [S: ] [P: ] [T: https-jsse-nio-8443-exec-4] Failed to get Grant Scopes page. Possible reason: list of scopes collected from the Connectors doesn't match list of Scopes defined in PingFederate 2023-11-08 12:06:26.531+0000 [L: ERROR] [O: S.c.t.s.a.s.SSOContext] [I: ] [U: Administrator] [S: ] [P: ] [T: https-jsse-nio-8443-exec-7] [ Failed to retrieve access token. ][ A redirect is required to get the users approval ]
- PingFederate Server log reports following error:
[org.sourceid.saml20.bindings.LoggingInterceptor] Received InMessageContext:
InMessageContext
entityId: twx-sp-client (null)
virtualServerId: null
Binding: oauth:authz
relayState: OD2EuP
params: {response_type=code, redirect_uri=https://<Thingworx_url>:8443/Thingworx/oauth2_authorization_code_redirect, scope=WINDCHILL WINDHCILL}
DEBUG [org.sourceid.oauth20.handlers.HandleAuthorizationRequest] Normal exception being handled during OAuth request processing: org.sourceid.oauth20.handlers.AuthorizationRequestException: invalid_scope: The requested scope is invalid, unknown, malformed, or exceeds that which the client is permitted to request.
- Windchill Apache access logs reports following error:
GET /Windchill/oauth HTTP/1.1" 404 196 2
- Steps to reproduce the issue:
- Duplicate the OOTB ptc-windchill-integration-connector and provide any name as custom-ptc-connector and save it.
- Go to Configuration tab of custom-ptc-connector > Update/Change Authorization Server Scopes Settings (AuthorizationServerScopesSettings
) parameter value to wrong value that is WINDHCILL instead of correct Authorization Server Scope value as WINDCHILL as shown below:
- Save the changes in custom-ptc-connector
- Restart the ThingWorx Server
- Go to Monitoring > Integration Connectors > Check the status of all connectors which should be failed as shown in below screenshot:
This is a printer-friendly version of Article 404868 and may be out of date. For the latest version click CS404868