PingFederate シングル サインオン (SSO) を使用して、OAuth 2.0 経由で Windchill PDMLink からデータを取得すると、「アクセスが拒否されました。登録済みの Windchill ユーザーではありません。」

• ThingWorx Navigate SSO では、ユーザーが Windchill からデータを取得できずエラーが発生する

wt.licenseusage.licensing.LicensingException: Access is denied. You are not a registered Windchill user.

• ユーザーがマイタスクアプリにアクセスすると、エラーポップアップ/赤いバーが表示されます
• サードパーティツールから有効な OAuth トークンを使用してデータを取得できません
• ThingWorx Navigate が Windchill からデータを正しくロードしない
• ptc-windchill-integration-connector 、 ptc-windchill-OData-connector 、またはカスタム統合コネクタ経由で Windchill PDMLink からデータを取得できません
• 有効化された SSO と ThingWorx Navigate および/または統合コネクタが機能しなくなりました
• ユーザーは ThingWorx Platform と Windchill PDMLink の両方に存在し、適切な権限を持っていますが、ThingWorx Platform からデータにアクセスしようとすると権限エラーが発生します。
• カスタム統合コネクタからサービスを手動で実行すると、次のようになります。

Execution error in service script [<Service>] :: The server sent HTTP status code 500: 500]

• <ThingworxStorage>\logs\ApplicationLog.log にエラーがあります:

[L: ERROR] [O: c.p.n.w.e.p.WindchillEntityProvider] [I: ] [U: <username>] [S: ] [P: ] [T: https-openssl-nio-443-exec-1] Unable to invoke service WorkItem_GET_ByID on connector ptc-windchill-OData-connector. Error message: Your route exchange has failed.  HTTP operation failed with status [500 - 500]
[L: ERROR] [O: c.p.n.WCAdapterInstance] [I: ] [U: <username>] [S: ] [P: ] [T: https-openssl-nio-443-exec-1] Error in getActionsForItem - Unable to invoke service WorkItem_GET_ByID on connector ptc-windchill-OData-connector. Error message: Your route exchange has failed.  HTTP operation failed with status [500 - 500]
[L: ERROR] [O: c.p.n.c.u.ServiceUtilities] [I: ] [U: <username>] [S: ] [P: ] [T: https-openssl-nio-443-exec-1] Unable to execute service GetActionsForItem: Error in getActionsForItem - Unable to invoke service WorkItem_GET_ByID on connector ptc-windchill-OData-connector. Error message: Your route exchange has failed.  HTTP operation failed with status [500 - 500]
[L: ERROR] [O: c.p.n.c.p.b.ProgressBusinessLogic] [I: ] [U: <username>] [S: ] [P: ] [T: https-openssl-nio-443-exec-1] Unable to fetch user event list from backend system Unable to execute service GetActionsForItem: Error in getActionsForItem - Unable to invoke service WorkItem_GET_ByID on connector ptc-windchill-OData-connector. Error message: Your route exchange has failed.  HTTP operation failed with status [500 - 500] 
[L: ERROR] [O: c.p.n.c.t.TaskProgressBusinessLogic] [I: ] [U: <username>] [S: ] [P: ] [T: https-openssl-nio-443-exec-1] Unable to fetch user event list from backend system Unable to execute service GetActionsForItem: Error in getActionsForItem - Unable to invoke service WorkItem_GET_ByID on connector ptc-windchill-OData-connector. Error message: Your route exchange has failed.  HTTP operation failed with status [500 - 500] 
[L: ERROR] [O: c.p.n.c.p.b.ProgressBusinessLogic] [I: ] [U: <username>] [S: ] [P: ] [T: https-openssl-nio-443-exec-1] Unable to calculate progress for Task progress : Unable to fetch user event list from backend system Unable to execute service GetActionsForItem: Error in getActionsForItem - Unable to invoke service WorkItem_GET_ByID on connector ptc-windchill-OData-connector. Error message: Your route exchange has failed.  HTTP operation failed with status [500 - 500] 
[L: ERROR] [O: c.p.n.c.t.TaskProgressBusinessLogic] [I: ] [U: <username>] [S: ] [P: ] [T: https-openssl-nio-443-exec-1] Unable to calculate progress for Task progress : Unable to fetch user event list from backend system Unable to execute service GetActionsForItem: Error in getActionsForItem - Unable to invoke service WorkItem_GET_ByID on connector ptc-windchill-OData-connector. Error message: Your route exchange has failed.  HTTP operation failed with status [500 - 500]

• IRLogs\ IntegrationRuntime.log のエラー:

[ClientProcessor-2] ERROR c.t.i.r.IntegrationEngine - Exchange process failed with exception thrown : Your route exchange has failed.  HTTP operation failed with status [500 - 500]
java.lang.RuntimeException: Your route exchange has failed.  HTTP operation failed with status [500 - 500]
    at com.twx.integration.route.exceptions.ExceptionHelper.convertToRuntimeException(ExceptionHelper.java:77)
    at com.twx.integration.route.IntegrationEngine.dispatchRoute(IntegrationEngine.java:159)
    at com.twx.integration.client.things.IntegrationRuntimeServer.Invoke(IntegrationRuntimeServer.java:72)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at com.thingworx.common.processors.ReflectionProcessor.processService(ReflectionProcessor.java:261)
    at com.thingworx.communications.client.things.VirtualThing.invokeService(VirtualThing.java:1120)
    at com.thingworx.communications.client.things.VirtualThing.handleServiceRequest(VirtualThing.java:1028)
    at com.thingworx.communications.client.ConnectedThingClient.handleRequest(ConnectedThingClient.java:315)
    at com.thingworx.communications.client.processor.ClientProcessorTask.run(ClientProcessorTask.java:55)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
    at java.util.concurrent.FutureTask.run(FutureTask.java:266)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:748)

• <Windchill>\logs\MethodServer ログにエラーがあります:

ERROR [ajp-nio-127.0.0.1-8010-exec-8] wt.licenseusage.StandardLicenseUsageService  - (wt.licenseusage.licenseUsageResource/INVALID_USER_LOGIN) wt.licenseusage.licensing.LicensingException: Access is denied. You are not a registered Windchill user.
ERROR [ajp-nio-127.0.0.1-8010-exec-8] wt.servlet.ServletRequestMonitor.request  - 2020-07-27 12:09:26.169 +0100, 4eiibp7k;kd4ene5e;2780;cqjtxn;2023, <name> , 10.10.10.100, /Windchill/oauth/servlet/odata/v2/Workflow/WorkItems('OR%3Awt.workflow.work.WorkItem%3A125646'), %24select=ID%2CRole%2FDisplay%2CStatus%2FDisplay%2CStatus%2FValue&%24expand=Activity%28%24select%3DDeadline%2CName%29%2CSubject%28%24select%3DSubjectName%29, GET, 500, 0.03125, 0.0750976
wt.session.SessionUsers$PreLoginException: wt.licenseusage.licensing.LicensingException: Access is denied. You are not a registered Windchill user.
    at wt.session.SessionUsers.put(SessionUsers.java:622)
    at wt.session.SessionUsers.cacheSessionUser(SessionUsers.java:580)
    at wt.session.SessionUsers.auditUser(SessionUsers.java:510)
    at wt.session.TransientSessionAuthenticator.<init>(TransientSessionAuthenticator.java:42)