Forum Discussion

phl110_191286

Nimbostratus

Mar 10, 2015

VMWare View with APM SAML Authentication (Big IP as SAML SP)

We have Big IP setup as a SAML SP. We also have VMware View that's load balanced behind F5. We're looking to integrate SAML authentication with VMware View instead of having View authenticate directl...

availability

BIG-IP Access Policy Manager (APM)

Historic F5 Account

Mar 11, 2015

Hi phl110,

Could you clarify the use-case:

Will users start with the Native View Client, or a web browser? (in latter case users go with a browser to a web portal such as F5 APM Webtop or Horizon Workspace. Users click on a View app/desktop web link and either Native or HTML5 View Client launches).

Native View Client does not support SAML in normal sense, only web browser case makes sense here.

What SAML IDP you were thinking to use?

VMware View relies on SAML IDP to pass uVMware-specific attributes in SAML assertion (such as encrypted password) - otherwise VMware View is unable to SSO user into the desktop (user sees Windows logon dialog and has to type their credentials). The only SAML IDP that supports this is the VMware's Horizon Workspace. Were you thinking of using Horizon Workspace as IDP? If not, will the lack of SSO be acceptable?