18.5 Configuring Single Sign-On Between Citrix and SSL VPN

You need to create a Form Fill policy and assign it to the protected resource for the Citrix login page.

  1. In the Administration Console, click Devices > Access Gateways > Edit > [Name of Reverse Proxy].

  2. Click Form Fill > Manage Policies > New.

  3. Name the Citrix policy, select Access Gateway: Form Fill as the type, then click OK.

  4. In the Actions section, click New > Form Fill.

  5. In the Form Selection section, identity the form on the Citrix login page.

  6. In the Fill Options section, create the following:

    • Username input field

    • Password input field

    • (Optional) If your login page requires a domain, add a domain input field.

  7. In the Submit Options section, configure the following:

    • Select Auto Submit.

    • Select Enable JavaScript Handling.

    • Click Statements to Execute on Post. Copy the Citrix Script found in the Additional Resources section in the Novell Documentation site.

      In the script:

      Replace <ag-url> with the following:

      • For a Traditional SSL VPN, use the hostname of the Access Gateway that is accelerating the SSL VPN server.

      • For an ESP-enabled SSL VPN, use the hostname of the SSL VPN server.

      Change the protocol to HTTPS if the secure protocol is used.

      Replace <Webserver-path> with the location of the Web server on which the test.js javaScript file is located. When this JavaScript file is used, it connects users from the outside through SSL VPN.

      Change the URL as follows, if you want to use the custom login method:

      http://<ag-url>/sslvpn/custom-login

  8. Configure any other options to match your form and your network.

    For more information, see Creating Form Fill Policies in the Novell Access Manager 3.1 SP1 Policy Management Guide

  9. In the Actions section, click New > Form Login Failure.

    Specify the procedures you want followed when login fails. For more information, see Creating a Login Failure Policy in the Novell Access Manager 3.1 SP1 Policy Management Guide

    Citrix displays login failures via the query string, so you’ll need to use CGI matching.

  10. Click OK, then click Apply Changes.

  11. Click Close.

    You should return to the Form Fill page for the protected resource.

  12. Select the policy you just created, then click Enable.

  13. Click Configuration Panel, then click OK.

  14. On the Server Configuration page, click OK, then click Update.