Citrix Federated Authentication Service Integration with APM

Introduction This guide will cover how to use APM as the access gateway in front of Storefront when using Citrix FAS. This will enable you to leverage authentication methods like SAML, Kerberos, o...
Published Dec 19, 2016
Version 1.0
access gateway
application delivery
BIG-IP
BIG-IP Access Policy Manager (APM)
citrix
federated authentication service
kerberos
saml
security
ncartaya99_3514's avatar
ncartaya99_3514
Icon for Nimbostratus rankNimbostratus
Feb 10, 2018

Hi Graham, I'm working with Manuel on the SHarePoint/Citrix SAML use case described above. When I look at the Session logs in the F5 and look at my session, I see the following error "SAML Agent /Common/Eaglestorefront-final_act_ag_SAML assertion is invalid error AuthenticationStatement must have AuthnInstant attribute". The claims rule in ADFS is set to map User-Principal-Name to Name ID. Do I need an additional claims rule for the AuthnInstant attribute in ADFS or is this attribute set in the F5 SP?