For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dluzzi's avatar
dluzzi
Icon for Nimbostratus rankNimbostratus
Aug 22, 2019

F5 APM - SAML Auth with Citrix Workspace App

Hello,   I have configured SAML auth with AzureAD with APM and storefront web interface with no issues. Im wondering if anyone has tried getting the local receiver/workspace app to work? It loo...
application delivery
BIG-IP Access Policy Manager (APM)
citrix
Dave_W's avatar
Dave_W
Icon for Employee rankEmployee
Sep 13, 2019

Hello, I believe this depends client. So if the Workspace client supports SAML then it should work.

  • dluzzi's avatar
    dluzzi
    Icon for Nimbostratus rankNimbostratus
    Sep 23, 2019

    I have tested with workspace app 1902, which does support SAML from citrix cloud/netscaler. I copied the settings from the web interface to receiver after the pre-check but it doesnt redirect to azure, just gets a normal login prompt.

    • Dave_W's avatar
      Dave_W
      Icon for Employee rankEmployee
      Sep 24, 2019

      Hello, so do you mean the Workspace app or Receiver app or am I misunderstanding?

    • dluzzi's avatar
      dluzzi
      Icon for Nimbostratus rankNimbostratus
      Sep 25, 2019

      Hi,

       

      Sorry realized that last reply wasn't that clear. So here is the policy I'm trying:

      So through the browser SAML works fine.

       

      When connecting via workspace/receiver app tried both latest receiver version and latest workspace version and it fails just gives the apps login prompt for username and password. I do have a test cloud account was able to get it work through there with the same workspace/receiver app so im guessing there is more to it that APM would need to trigger the app to redirect to the SAML IP to login.

       

    • Dave_W's avatar
      Dave_W
      Icon for Employee rankEmployee
      Sep 26, 2019

      Hi, as far as I can tell it should be supported. The SAML logging in APM is pretty good as far as useful errors. I would set the Access Policy logs to debug and see if you are getting an error.