Product Documentation

Enterprise Apps

Jun 07, 2013

You can create your own application connectors in App Controller. You can create either a Security Assertion Markup Language (SAML) connector or an HTTP Federated Formfill connector.

When you build a connector, you use the logon web address for the URL. For example, you want to add LinkedIn to your application list. Go to http://www.linkedin.com and then click Sign in. When the logon page appears, copy the web address and then paste the web address in the URL field in the Configure App wizard in App Controller.

Building SAML Connectors

App Controller enables you to build either a SAML 1.1 or SAML 2.0 connector. SAML connectors are used for web applications that support the SAML protocol for SSO. The Generic SAML connector enables you to create your own SAML connector for applications that support the SAML protocol. App Controller supports the identity provider (IdP) SSO for SAML applications.

Building HTTP Federated Formfill Connectors

App Controller can use Formfill to automatically enter user credentials in the application’s logon page. When users connect to a SaaS application, the web browser displays the logon form and then redirects users to the SaaS application. When you to add a new Formfill connector to the existing catalog, you must provide information about the application that you want to add. After you successfully configure the connector, you can then configure the connector for SSO. The Formfill connector supports applications that:

  • Obtain the user name and password and submit the credentials to the application without verifying the information again.
  • Set the application cookies when users request the logon page. The cookies set the attributes that change for each logon request for the application.

To build a SAML connector

  1. In the App Controller management console, click the Settings tab.
  2. In the left pane, under Quick Links, click Add connector and then click SAML connector.
  3. In the Add a SAML Connector dialog box, in Name, type a name for the application.
  4. In Description, describe the application.
  5. In Logon URL, enter the logon web address for the application.

    You must include http:// in the web address.

  6. In SAML version, select the version.
  7. In Entity ID, enter the identity for the SAML application.
  8. In Relay State URL, enter the web address for the SAML application.

    The relay state URL is the response URL from the application.

  9. In Name ID format, select from the options in the list. The default is Email Address.
  10. In ACS URL, enter the assertion consumer service of the identity provider or service provider.

    The AssertionConsumerServiceURL (ACS URL) provides single sign-on (SSO) capability for users.

  11. In Image, select Use default to use the default Citrix logo or select Upload to add your own logo to the logon page.

    If you want to upload your own logo, click Browse and then navigate to the logo on your device.

    Note: The graphic you upload must be the type PNG. You cannot upload a GIF or JPEG graphic. When you add a custom graphic, you cannot change it at a later time.
  12. Click Save.

To build an HTTP Federated Formfill connector

  1. In the App Controller management console, click the Settings tab.
  2. In the left pane, under Quick Links, click Add connector and then select Formfill connector.
  3. In the Add a Formfill connector dialog box, in Name, type a name for the connector.
  4. In Description, enter a description for the connector.
  5. In Logon URL, enter the logon web address for the connector.
  6. In Image, select the default Citrix logo or select Upload to add your own logo to the logon page.

    If you want to upload your own logo, click Browse and then navigate to the logo on your device.

    Note: The graphic you upload must be the type PNG. You cannot upload a GIF or JPEG graphic. When you add a custom graphic, you cannot change it at a later time.
  7. Click Save.