Jump to content
Welcome to our new Citrix community!

Protecting Load Balancer with SAML


Recommended Posts

Citrix ADC 13.0 Build 88.14


Currently we have SSO configured with AAA vserver using LDAP authentication for TM Load balances services.

We are looking to implement MFA to protect our TM load balanced servers (lbvsvr) using SSO with SAML and Azure AD.

Does this option work as I have seen alot of documents on configuring this option on Citrix Gateways but none if you want to protect the TM Content Switch or Load Balancer ?


Has anyone implemented this successfully and is there a step by step guideline on how to implement ?

Link to comment
Share on other sites

Sure it's working fine. You just have to double-check which credential provider your backend webserver (lbvsrv target) is accepting if you would like to have SSO into that web-application after the successful login to Azure AD, too. When switching from LDAP to Azure AD, your NetScaler is just having a SAML or OAuth Token. If your webserver isn't supporting a modern authentication, you can (for example) fall back to kerberos.




Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...