VMWare View with APM SAML Authentication (Big IP as SAML SP)

Hi Andrey,

We are primarily looking for a way to authenticate the HTML5 web browser client. We do not have Horizon Workspace and were intending to use Shibboleth or CA Siteminder Federation to act as the SAML IDP. ADFS is also an option for us. Are you familiar with any of these SAML IDP products and if there is a way to get them to work with Big IP as a SAML SP?

I did also hear that this may be possible to accomplish via Kerberos. Process would be F5 redirects the user to Shibboleth SAML IDP to auth, then passing the userID from SAML into Kerberos within F5 and then using an SSO Credential Map. However, the documentation I found seems to want to still pass the user password from an F5 login page (step 4.4. https://devcentral.f5.com/articles/apm-cookbook-single-sign-on-sso-using-kerberos)) so I'm not sure if this will truly work as I'm still redirecting to an External IDP for login. Thus F5 never gets the password