# F5 APM - SAML Auth with Citrix Workspace App **URL:** \ **Category:** Technical Forums\ **Tags:** big-ip-access-policy-manager-apm, application-delivery, citrix\ **Created:** [August 22, 2019, 7:16pm UTC](https://community.f5.com/t/f5-apm-saml-auth-with-citrix-workspace-app/56934 "2019-08-22T19:16:06Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![dluzzi](https://avatars.discourse-cdn.com/v4/letter/d/9de0a6/32.png) [@dluzzi](https://community.f5.com/u/dluzzi)\ **Post date:** [August 22, 2019, 7:16pm UTC](https://community.f5.com/t/f5-apm-saml-auth-with-citrix-workspace-app/56934/1 "2019-08-22T19:16:06Z")
Hello, I have configured SAML auth with AzureAD with APM and storefront web interface with no issues. Im wondering if anyone has tried getting the local receiver/workspace app to work? It looks like the local client now supports SAML auth coming from a netscaler, however not sure if APM can trigger the app to redirect it to Azure to login. ---
**Author:** ![Dave\_W](https://avatars.discourse-cdn.com/v4/letter/d/67e7ee/32.png) [@Dave\_W](https://community.f5.com/u/Dave_W)\ **Post date:** [September 13, 2019, 7:38pm UTC](https://community.f5.com/t/f5-apm-saml-auth-with-citrix-workspace-app/56934/2 "2019-09-13T19:38:59Z")
Hello, I believe this depends client. So if the Workspace client supports SAML then it should work. ---
**Author:** ![dluzzi](https://avatars.discourse-cdn.com/v4/letter/d/9de0a6/32.png) [@dluzzi](https://community.f5.com/u/dluzzi)\ **Post date:** [September 23, 2019, 3:32pm UTC](https://community.f5.com/t/f5-apm-saml-auth-with-citrix-workspace-app/56934/3 "2019-09-23T15:32:17Z")
I have tested with workspace app 1902, which does support SAML from citrix cloud/netscaler. I copied the settings from the web interface to receiver after the pre-check but it doesnt redirect to azure, just gets a normal login prompt. ---
**Author:** ![Dave\_W](https://avatars.discourse-cdn.com/v4/letter/d/67e7ee/32.png) [@Dave\_W](https://community.f5.com/u/Dave_W)\ **Post date:** [September 24, 2019, 8:34pm UTC](https://community.f5.com/t/f5-apm-saml-auth-with-citrix-workspace-app/56934/4 "2019-09-24T20:34:00Z")
Hello, so do you mean the Workspace app or Receiver app or am I misunderstanding? ---
**Author:** ![dluzzi](https://avatars.discourse-cdn.com/v4/letter/d/9de0a6/32.png) [@dluzzi](https://community.f5.com/u/dluzzi)\ **Post date:** [September 25, 2019, 8:15pm UTC](https://community.f5.com/t/f5-apm-saml-auth-with-citrix-workspace-app/56934/5 "2019-09-25T20:15:28Z")
Hi, Sorry realized that last reply wasn’t that clear. So here is the policy I’m trying: ![image_252189.png](https://d20hrnpixdzcsd.cloudfront.net/original/3X/c/2/c26724fefae80ac7b7a49ce1590fb71f7b95ee64.png) So through the browser SAML works fine. When connecting via workspace/receiver app tried both latest receiver version and latest workspace version and it fails just gives the apps login prompt for username and password. I do have a test cloud account was able to get it work through there with the same workspace/receiver app so im guessing there is more to it that APM would need to trigger the app to redirect to the SAML IP to login. ---
**Author:** ![Dave\_W](https://avatars.discourse-cdn.com/v4/letter/d/67e7ee/32.png) [@Dave\_W](https://community.f5.com/u/Dave_W)\ **Post date:** [September 26, 2019, 3:06pm UTC](https://community.f5.com/t/f5-apm-saml-auth-with-citrix-workspace-app/56934/6 "2019-09-26T15:06:03Z")
Hi, as far as I can tell it should be supported. The SAML logging in APM is pretty good as far as useful errors. I would set the Access Policy logs to debug and see if you are getting an error. ---
**Author:** ![StevenL](https://avatars.discourse-cdn.com/v4/letter/s/7ab992/32.png) [@StevenL](https://community.f5.com/u/StevenL)\ **Post date:** [December 26, 2019, 8:52am UTC](https://community.f5.com/t/f5-apm-saml-auth-with-citrix-workspace-app/56934/7 "2019-12-26T08:52:27Z")
I’m currently having the same issue. Has this been solved? If so, what’s the solution? ---
**Author:** ![Dathi](https://avatars.discourse-cdn.com/v4/letter/d/3e96dc/32.png) [@Dathi](https://community.f5.com/u/Dathi)\ **Post date:** [October 16, 2020, 8:05pm UTC](https://community.f5.com/t/f5-apm-saml-auth-with-citrix-workspace-app/56934/8 "2020-10-16T20:05:32Z")
I am trying to get the SAML auth with ADFS(on prem) to storefront. My policy looks as below. For some reason, upon entering my fqdn, it rightly gets authenticated on ADFS and then stops at the storefront logon page. Does not SSO into it. Not sure what might be the issue. Could you think of anything ? ![image_248107.png](https://d20hrnpixdzcsd.cloudfront.net/original/3X/9/f/9fd66c295c36057d0f488bac612eac0ba8c2a18f.png) ---
**Author:** ![Niklas\_Sävenstedt](https://avatars.discourse-cdn.com/v4/letter/n/4da419/32.png) [@Niklas\_Sävenstedt](https://community.f5.com/u/Niklas_S%C3%A4venstedt)\ **Post date:** [June 2, 2022, 7:24am UTC](https://community.f5.com/t/f5-apm-saml-auth-with-citrix-workspace-app/56934/9 "2022-06-02T07:24:37Z")
Hi Did anyone solve this? We’re having almost the same setup. On prem farm with Storefront, behind F5 APM and ADFS as IDP, and Citrix FAS to support certificate logon. Web access works flawlessly, and Citrix Workspace App with username/password also works, but we would like to have the same logon through ADFS and SAML with MFA for the Worksspace App, because of the risk of only using simple username/password domain logon from Internet. I think the problem is in APM and that the policy doesn’t trigger a redirect in the App, but I’m not sure. I know Citrix doesn’t support the solution with F5 APM, but have anyone managed to solve this? Best regards, Niklas ---
**Author:** ![Clifford\_Ainswo](https://avatars.discourse-cdn.com/v4/letter/c/977dab/32.png) [@Clifford\_Ainswo](https://community.f5.com/u/Clifford_Ainswo)\ **Post date:** [July 25, 2023, 7:27am UTC](https://community.f5.com/t/f5-apm-saml-auth-with-citrix-workspace-app/56934/10 "2023-07-25T07:27:35Z")
To save anyone else any frustration with this topic I had it confirmed as of July '23 (and not likely to change). Only the browser and not the Citrix client are supported with this method of authentication.