This message was deleted.
# citrix-netscalers
Slackbot
05/04/2023, 4:01 PMThis message was deleted.
k
Kari Ruissalo (WyW)
05/05/2023, 4:16 AMWe'll if you had local authentication before, the Gateway "knew" your credentials (user/pass), but now you have the SAML claim for the GW/AAA vServer, so SSO is not possible.
Kari Ruissalo (WyW)
05/05/2023, 4:18 AMIf you need to capture the on-prem credentials during logon, you could achieve that with nFactor, but I think that's not a valid option end uesr-wise. The best option would be to have the internal applications modernized so that they accept SAML/OIC. Then you just need to decide whether to use the GW/AAA as the IdP or the AAD. Latter one is more common I think.
c
Cormac Long
05/05/2023, 6:23 AMHi Kari, this is what I thought was happening, thanks for validating.