Forum Discussion
phl110_191286
Nimbostratus
NimbostratusVMWare View with APM SAML Authentication (Big IP as SAML SP)
We have Big IP setup as a SAML SP. We also have VMware View that's load balanced behind F5. We're looking to integrate SAML authentication with VMware View instead of having View authenticate directl...
Hi phl110,
Could you clarify the use-case:
- Will users start with the Native View Client, or a web browser? (in latter case users go with a browser to a web portal such as F5 APM Webtop or Horizon Workspace. Users click on a View app/desktop web link and either Native or HTML5 View Client launches).
Native View Client does not support SAML in normal sense, only web browser case makes sense here.
- What SAML IDP you were thinking to use?
VMware View relies on SAML IDP to pass uVMware-specific attributes in SAML assertion (such as encrypted password) - otherwise VMware View is unable to SSO user into the desktop (user sees Windows logon dialog and has to type their credentials). The only SAML IDP that supports this is the VMware's Horizon Workspace. Were you thinking of using Horizon Workspace as IDP? If not, will the lack of SSO be acceptable?
- Would you use F5 APM as SAML IDP and VMware View as SAML SP?
