Sharefile SAML AD Authentication Fails on Chrome and Firefox

After configuring our ShareFile to integrate our AD accounts using AD FS 2.0 and SAML for login, we found several user could not log in with Chrome or Firefox.  They would go to the SAML login URL and then enter their correct AD credentials.  The login would then fail.  Using IE with the same credentials was successful.  After investigation, the issue was linked to AD FS 2.0 and Chrome/Firefox, not ShareFile.

The Solution below was found at http://exitcodezero.wordpress.com/2013/05/30/adfs-authentication-issues-with-chrome-and-firefox/

To correct the issues, disable Extended Protection in IIS on your ADFS server

  1. Open IIS Manager on your ADFS Server
  2. Expand your ADFS Server
  3. Expand Sites
  4. Expand Default Web Site
  5. Expand adfs
  6. Click to select ls
  7. Double-click Authentication 2013.05.30_adfs_auth_2
  8. Right-click Windows Authentication and select Advanced Settings… 2013.05.30_adfs_auth_3
  9. Set Extended Protection to Off 2013.05.30_adfs_auth_4
  10. Restart IIS or perform an iisreset

Lewan Synergy of the Rockies

Our Lewan Synergy of the Rockies event was yesterday, here are some highlights and links from the event.

Citrix Support – Premier Support calculator citrix.com/pscalculator. AutoSupport released for automated diagnosis of issues http://support.citrix.com/article/CTX135408

Citrix GotoMeeting – mobile clients have the ability to start and host a meeting as well as present content from the device. Whiteboard functionality is also built in.

Citrix XenServer – XenServer 6.1 released, includes support for Storage XenMotion, LACP (up to 4) support, batch conversion of VMware virtual machines

Citrix XenClient – added support for ultrabooks

Citrix ShareFile- What ShareFile does is: Store, Sync, Share

  • Sync and device with user files
  • Selective offline access on mobile devices
  • Data protection – encryption, lock, remote wipe, poison pill
  • Enables file sharing with anyone
  • Online file sharing space for virtual teams

With ShareFile Enterprise released, control plane resides at Citrix Online while the data plane can reside inside your datacenter, your data never resides outside. StorageZone Connect (tech preview) allows integration of existing file shares.

Citrix CloudGateway Enterprise – enabled mobile application management of iOS and Android devices, wrapped native app deployment via the Citrix AppController. AppController integrates mobile, web/saas, follow-me-data.

Just announced last week is @WorkWeb and @WorkMail, videos of this solution in action are here.

Citrix Receiver – Citrix Receiver for HTML 5 was released this summer, requires Access Gateway 10 and StoreFront 1.2. Enabled clientless access to Windows apps, Desktops, web and SAAS apps.

One Citrix Receiver look and feel across desktops and mobile platforms. First Time User experience allows setup and configuration with just a users email address.

Citrix RemotePC – Citrix RemotePC was released as part of Citrix XenDesktop 5.6 Feature Pack 1. RemotePC is the secure brokering of a physical endpoint (desktop or laptop) that is in your office (typically) via Citrix HDX technology. Think of it as GotoMyPC but with the centralized control over virtual channels (printing, clipboard, local drives, etc), automated provisioning of PC and end users, and the high performance of Citrix HDX. RemotePC is available in Citrix XenDesktop Enterprise and Platinum and in most cases won’t require any additional Microsoft licensing…as in you won’t need VDA licenses!

Universal Print Server- Combined with the previously available Universal Print Driver, administrators may now install a single driver in the virtual desktop image or application server to permit local or network printing from any device, including thin clients and tablets, leveraging HDX optimization technology to reduce bandwidth load over wide area networks and manage printing communications outside of the virtual desktop channel for enhanced Quality of Service. Use of the Citrix Universal Print Driver had previously been constrained to Windows devices because we relied on Windows to translate from Windows-centric print formats. With UPS, the print engine runs on a server, and we’re no longer limited to printing from Windows devices because the format translation is done on the server. There’s now little or no need to install 3rd party, non-native printer drivers, so overall stability is also improved.

Project Excalibur (XenDesktop v.Next) – Part of Project Avalon. Unification and simplification of XenApp/XenDesktop into a single architecture. XenApp IMA architecture has been around since Metaframe XP and in Project Avalon is being integrated into the Citrix XenDesktop FMA architecture.

Excalibur will also bring support for Windows Server 2012 and Windows 8 machine groups.

Also announced was a new SuperCodec using H.264 encode/decode. With so many devices support H.264 decode via hardware acceleration this could be a fallback encoding method for devices that don’t support offloading the multimedia to the client (ex: AVI, WMV, Flash). With the upcoming vGPU (GPU virtualization) the encoding could also potentially benefit from hardware based encoding. This technology will also support transcoding down high bit-rate video down to adapt to available bandwidth so that you can take 1080p video and transcode down to stream on 3G networks.

You can watch Citrix Synergy Barcelona session SYN133 on CitrixTV which goes thru the Excalibur release.

Excalibur will be available for download as a tech preview on November 1st.

Citrix Netscaler – Citrix Netscaler 10 now support scale-up, scale-in, and scale-out (TriScale) options with new Active-Active-Active-Ac.. scale-out options. Citrix and Cisco also announced a new partnership where Cisco will be selling Citrix Netscaler into their customers who are looking for Application Delivery Controllers as Cisco recently discontinued their ACE product line. Citrix also announced new partnerships with a number of key vendors who will be building joint solutions on their Netscaler product line.