Forum Discussion

dluzzi's avatar
dluzzi
Icon for Nimbostratus rankNimbostratus
Aug 22, 2019

F5 APM - SAML Auth with Citrix Workspace App

Hello,   I have configured SAML auth with AzureAD with APM and storefront web interface with no issues. Im wondering if anyone has tried getting the local receiver/workspace app to work? It loo...
application delivery
BIG-IP Access Policy Manager (APM)
citrix
Dave_W's avatar
Dave_W
Icon for Employee rankEmployee

Hello, I believe this depends client. So if the Workspace client supports SAML then it should work.

dluzzi's avatar
dluzzi
Icon for Nimbostratus rankNimbostratus
Sep 23, 2019

I have tested with workspace app 1902, which does support SAML from citrix cloud/netscaler. I copied the settings from the web interface to receiver after the pre-check but it doesnt redirect to azure, just gets a normal login prompt.

  • Dave_W's avatar
    Dave_W
    Icon for Employee rankEmployee
    Sep 24, 2019

    Hello, so do you mean the Workspace app or Receiver app or am I misunderstanding?

  • dluzzi's avatar
    dluzzi
    Icon for Nimbostratus rankNimbostratus
    Sep 25, 2019

    Hi,

     

    Sorry realized that last reply wasn't that clear. So here is the policy I'm trying:

    So through the browser SAML works fine.

     

    When connecting via workspace/receiver app tried both latest receiver version and latest workspace version and it fails just gives the apps login prompt for username and password. I do have a test cloud account was able to get it work through there with the same workspace/receiver app so im guessing there is more to it that APM would need to trigger the app to redirect to the SAML IP to login.

     

  • Dave_W's avatar
    Dave_W
    Icon for Employee rankEmployee
    Sep 26, 2019

    Hi, as far as I can tell it should be supported. The SAML logging in APM is pretty good as far as useful errors. I would set the Access Policy logs to debug and see if you are getting an error.