This message was deleted.
# citrix-netscalers
Slackbot
02/01/2023, 11:15 AMThis message was deleted.
k
Kari Ruissalo (WyW)
02/01/2023, 12:58 PMThe NetScaler Gateway is acting as a SAML SP in this case? Are you able to add a claim or sth stating the CA result?
m
Marion
02/01/2023, 1:00 PMSometimes when it seems to tricky to get the claims I need from the SAML IDP and I need eg Domain Groups I just add a LDAP Policy with authentication disabled and search for the username in the nfactor flow. Maybe this can help your case? Can you match Delievery Group Membership to AD Groups? Or do you really need who has permissions to the delievery group itself in Citrix ?
k
Kari Ruissalo (WyW)
02/01/2023, 1:01 PMWhat if the CA policy detects what kind of location the user is accessing the environment from or something regarding their endpoint device? This is something you cannot control with groups.
Kari Ruissalo (WyW)
02/01/2023, 1:03 PMI'd check if there's something you could use from the Intune Integration (https://docs.citrix.com/en-us/citrix-gateway/13/microsoft-intune-integration.html). The thing is that the Gateway needs to get a "signal" from AAD in the SAML claim and somehow process this so that the Virtual Apps can intepret the result and make decisions.
Kari Ruissalo (WyW)
02/01/2023, 1:03 PMI'd say that every possible component needs to be Premium licensed 😄
🤣 1
Kari Ruissalo (WyW)
02/01/2023, 1:03 PM... and it still might be impossible