ADC

Configuring SAML single sign-on

August 20, 2024

Contributed by:

C C

To provide single sign-on capabilities across applications that are hosted on the service provider, you can configure SAML single sign-on on the SAML SP.

Configuring SAML single sign-on by using the command line interface

Configure the SAML SSO profile.

Example

In the following command, Example is the load balancing virtual server that has a web link from the SharePoint portal. Nssp.example.com is the Traffic Management virtual server that is load balancing the SharePoint server.

 add tm samlSSOProfile tm-saml-sso -samlSigningCertName nssp -assertionConsumerServiceURL "https://nssp2.example.com/cgi/samlauth" -relaystateRule "\\"https://nssp2.example.com/samlsso.html\\"" -sendPassword ON -samlIssuerName nssp.example.com
 <!--NeedCopy-->

Associate the SAML SSO profile with the traffic action.

Example

The following command enables SSO and binds the SAML SSO profile created above to a traffic action.
```
add tm trafficAction html_act -SSO ON -samlSSOProfile tm-saml-sso

```
Configure the traffic policy that specifies when the action must be executed.

Example

The following command associates the traffic action with a traffic policy.
```
add tm trafficPolicy html_pol "HTTP.REQ.URL.CONTAINS(\\"abc.html\\")" html_act

```
Bind the traffic policy created above to a traffic management virtual server (load balancing or content switching). Alternatively, the traffic policy can be associated globally.

Note

This traffic management virtual server must be associated with the relevant authentication virtual sever that is associated with the SAML action.
```
bind lb vserver lb1_ssl -policyName html_pol -priority 100 -gotoPriorityExpression END -type REQUEST

```

Configuring SAML single sign-on by using the graphical user interface

Define the SAML SSO profile, the traffic profile, and the traffic policy.

Navigate to Security > AAA - Application Traffic > Policies > Traffic, select the appropriate tab, and configure the settings.
Bind the traffic policy to a traffic management virtual server or globally to the Citrix ADC appliance.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Configuring SAML single sign-on

August 20, 2024

Contributed by:

C C

August 20, 2024

Contributed by:

C C

Configuring SAML single sign-on

Configuring SAML single sign-on by using the command line interface

Configuring SAML single sign-on by using the graphical user interface

In this article