Page created: 14 Jul 2020
|
Page updated: 8 Feb 2022
| 1 min read
Citrix Other Documents Integrations Language English Integration Content Type Product documentation Audience Administrator
To allow PingFederate to handle authentication requests, add your PingFederate signing certificate and sign-on URL.
- In Citrix ADC, complete the steps in Enabling authentication, authorization, and auditing in the Citrix documentation.
- Go to Configuration > Authentication > Dashboard. Click Add.
- In the Create Authentication Server window, from the Choose Server Type list, select SAML.
- In the Name field, enter a name to represent your PingFederate server, such as PF_Auth_Server.
- Clear the Import Metadata check box.
-
In the Redirect URL field, enter the following
PingFederate sign-on URL. Substitute your hostname and port, and choose a
connection ID.
https://pf_host:pf_port/idp/startSSO.ping?PartnerSpId=connectionID
You will use the connection ID again in Creating a single sign-on connection.
- From the SAML Binding and Logout Binding lists, select POST.
-
Add your PingFederate signing certificate.
- Under IDP Certificate Name, click Add.
- In the Certificate-Key Pair Name field, enter a name, such as PF_Certificate.
- In the Certificate File Name section, upload the certificate that you saved in Exporting your PingFederate signing certificate. Click Install.
- In the Issuer Name field, enter a name to represent Citrix, such as CitrixSAML.
- From the Reject Unsigned Assertion list, select OFF. Click More.
- In the Signature Algorithm section, click RSA-SHA256.
- In the Digest Method section, click SHA256. Click Create.