If you do not have a certificate, or if all of your certificates have expired, click Add Certificate and use the newly created certificate. We recommend that you choose the certificate with the latest expiration date. Next to AuthPoint certificate, you will associate with your resource, click, select Download Metadata and Download Certificate.If you have a Service Provider account, you must select an account from Account Manager. From the navigation menu, select Configure > AuthPoint.After you have those, you can configure Unified Access Gateway. To start, you must download the metadata file and the certificate file from the Certificate Management page in the AuthPoint management UI. You have an AuthPoint identity provider (IdP) certificate An AuthPoint IdP certificate is required for SAML authentication.A token is assigned to a user in AuthPoint.

You can use Horizon Client to log in to Connection Server and invoke published app(s) with a user that exists in the Active Directory domain.

Horizon Connection Server has published one or more apps that exist on the Virtual Machine with Horizon Agent installed.

vCenter Server manages a Virtual Machine that has Horizon Agent installed.

Horizon Connection Server is connected to vCenter Server.

Unified Access Gateway is connected to Horizon Connection Server.

This diagram shows the data flow of an MFA transaction for a VMware Unified Access Gateway.īefore you begin these procedures, make sure that: VMware Unified Access Gateway SAML Authentication Data Flow with AuthPointĪuthPoint communicates with various cloud-based services and service providers with the SAML protocol.

AD DS, AD CS, and DNS on Windows Server 2016.

The hardware and software used in this guide include:

Uag vmware horizon