Hi, we are implementing SAML authentification for ...
# citrix-netscalers
saimen
05/23/2024, 12:56 PMHi, we are implementing SAML authentification for citrix . At the moment our Netscaler is our CA and we are planning to replace it with openssl. I assume that a Microsoft CA is a must have, because I don't see any possibility to select another ca in the FAS wizard or anyone knows if it would work also with a 3rd party CA
j
Jeff Riechers
05/23/2024, 12:58 PMThere are certain CAs that are supported, but they have to integrate with your AD to get all the authentication info. I will find the list.
d
Daniel Madsen
05/23/2024, 1:01 PMDaniel Madsen
05/23/2024, 1:02 PM• For certificate authorities other than Microsoft, ensure the following:
◦ The certificate authority (CA) is registered in the Active Directory as an enrollment service.
◦ The CA certificate is in the NTAuth store on the Domain Controller. For more information, see How to import third-party certificate authority (CA) certificates into the Enterprise NTAuth store.
s
saimen
05/23/2024, 1:07 PMperfect, thanks for the quick info
r
Richard Faulkner
05/23/2024, 1:37 PMDefinitely, you can use third-party SSL. I assisted a customer who was having a problem with the third party. In addition to the requirements listed above, ensure that if your firewall is blocking any outbound traffic from your Domain Controllers, you permit them and your FAS servers to reach the third party's certificate revocation list. If it can't check that it hasn't been revoked, it won't accept the certificate.
👍 1
2 Views