Citrix services

Setting up IES for Citrix ADC

Configuring SAML for Citrix StoreFront

Setting Citrix StoreFront

Step 1

In right sidebar Store Services > Manage Authentication Methods.

Step 2

In Manage Authentication Methods window check SAML Authentication.

Step 3

Click Settings > Identity Provider:

• Select SAML Binding - Redirect

• Add Address - <IES address>/saml/login

• Import Signing Certificate, downloaded from IdP (IES)

Step 4

Click Settings > Service Provider:

• Export Signing Certificate

• Copy Service Provider Identifier value

Setting IES

1. Go to Settings -> Parameters -> SAML section

2. Click Add Service Provider button

   • Issuer - Service Provider Identifier from Citrix StoreFront http://citrix.lab.ipi.com/Citrix/Authentication

   • Assertion Consumer Service - AssertionConsumerService from Citrix StoreFront https://citrix.lab.ipi.com/Citrix/Authentication/SamlForms/AssertionConsumerService

   • Public x509 Certificate - Signing Certificate from Citrix StoreFront

   • NameID Format - Email

   • NameID Value - Email