How to Configure SAML SSO Authentication between NetScaler Gateway and Load Balancing Virtual Servers - Part II

To configure SAML SSO authentication between NetScaler Gateway and load balancing virtual server, complete the following procedure:

1. Configuring NetScaler Gateway Virtual Server for SSO to Published Applications

2. Creating AAA Virtual Server and Binding the SAML Policy

3. Creating a Load Balancing Virtual Server to the Application Server

4. Publishing a Web Application at the XenApp Site

Creating AAA Virtual Server and Binding the SAML Policy

Creating a Load Balancing Virtual Server to the Application Server

1. In the?? Configuration?? tab, navigate?? Traffic Management?? >?? Load Balancing?? >?? Virtual Servers?? and click?? Add
2. In the?? Load Balancing Virtual Server?? field, specify the options:
   • Name, example:?? lb1_ssl
   • Protocol, example:?? SSL
   • IP Address Type, example:?? IP Address
   • IP Address, example:?? 192.168.10.103
   • Port, example:?? 443
   • Click?? OK
   • Click?? Continue
   • Click?? Continue
   • Click?? Persistence?? option.
     • Validate?? NONE?? is selected
     • Click?? OK
   • Click?? Traffic Setting?? option.
     • Validate Client Idle Time-out?? is set to?? 180
     • Click?? OK
   • Click?? Authentication?? option.
     • Validate Form Based Authentication?? is selected.
     • Authentication FQDN, example:?? auth1.example.com
     • Choose Authentication Virtual Server Type, example:?? Authentication Virtual Server
     • Authentication Virtual Server,?? example:?? av_saml
3. Click OK
4. Click Done.

1. In the?? Configuration?? tab, navigate?? Security?? >?? AAA – Application Traffic?? >?? Policies?? >?? Traffic?? and click on the?? Form SSO Policies?? tab.??
2. Click Add
3. In the?? Configuration Form SSO Profile?? field, specify the options:
   • Name, example:?? html_formaction
   • Action URL, example:?? /MYPHP/auth.php
   • User Name Field,?? example:?? username
   • Password?? Field, example:?? password
   • Expression, example:?? HTTP.RES.STATUS.EQ(200)
   • SubmitMethod, example:?? POST
4. Click?? OK

1. In the?? Configuration?? tab, navigate?? Security?? >?? AAA – Application Traffic?? >?? Policies?? >?? Traffic?? and click on the?? Traffic Profiles?? tab.??
2. Click?? Add
3. In the?? Create Traffic Profile?? field, specify the options
   • Name, example:?? html_prof??
   • AppTimeout: example:?? 180
   • Single Sign-on,?? example:?? ON
   • Form SSO Profile, example:?? html_formaction
4. Click?? Create

1. In the?? Configuration?? tab, navigate?? Security?? >?? AAA – Application Traffic?? >?? Policies?? >?? Traffic?? and click on the?? Traffic Policy?? tab.??
2. Click?? Add
3. In the Create Traffic Policy?? field, specify the options
   • Name, example:?? html_pol
   • Profile, validate the profile is select in the previous step, example:?? html_prof
   • Expression, example:?? HTTP.REQ.URL.CONTAINS("abc.html")
4. Click?? Create

1. In the?? Configuration?? tab, navigate?? Traffic Management?? >?? Load Balancing?? >?? Virtual Servers?? and Highlight the Virtual Servers, example:?? lb1_ssl.??
2. Click?? Edit
3. Click?? Policies
4. Click on the symbol?? +?? in the?? Policy?? field.
5. In the?? Policies?? field, specify the options
6. Choose?? Policy, example:?? Traffic
7. Choose?? Type, example:?? Request
8. Click?? Continue.
9. In the?? Policy Binding?? field, specify the options
   • Binding, example:?? html.pol
   • Click?? Select
   • Priority, example:?? 100
   • Click?? Bind

Publishing a Web Application at the XenApp Site.

??






??
After you configure the NetScaler appliance and the XenApp site, the user can logon to the VPN virtual server and open the published application. Form SAML SSO will trigger SAMLSSO to the load balancing virtual server and applies SSO to the application server.