Citrix Cloud™

Which SAML Binding Mechanism should I choose to use?

March 31, 2026

Author: Mark Dear

Whether to use HTTP POST or HTTP Redirect for SSO and SLO is determined by the SAML bindings your SAML IdP supports. If your SAML provider supports multiple binding mechanisms then Citrix recommends you choose HTTP Post over HTTP Redirect as the SAML binding. There is no need to enable both SAML binding mechanisms on your SAML provider if it supports both. It is recommended you choose a single SAML binding type for both SSO and SLO.

SAML Binding Support

SAML Binding	Supported by Citrix Cloud
HTTP POST	Recommended.
HTTP Redirect	Supported.
SAML Artifact binding	Not Supported.
SOAP	Not Supported.

Important:

HTTP Post is the recommended binding mechanism for both SSO and SLO requests for two reasons.

HTTP Post is easier to debug when signing enforcement is enabled on both sides of the SAML connections as the SAML XML contains easily identifiable sections that show the signature and certificate used. This is easier for humans to see and debug than if this signature data is embedded inside a very long Redirect URI which needs to be URL decoded.

HTTP Redirect URIs can grow very long and exceed a critical threshold which then leads to errors during SAML authentication and can cause login or logout failure. The GET binding type is limited to a maximum of 2,048 characters, minus the number of characters in the actual path. The POST method is not limited by the size of the URL for submitting name and value pairs.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.