1. ON ADC go into Citrix Gateway > Policies > Authentication > SAML
2. Click on Servers tab at the top and then Add

1. Enter a Name but untick Import Metadata

1. Open up the IDP Metadata file you saved earlier
2. Locate SingleSignOn and SingleLogoutService Location

1. Add the Login URL to Redirect URL and the logout URL to the Single Logout URL

1. Set SAML Binding and Logout Binding to Redirect

1. For IDP Certificate Name, click the drop-down arrow and choose your recently added IDP file.

1. In the Issuer Name field, enter the FQDN of your NetScaler Gateway Virtual Server. (The SAML Issuer Name must be identical to the EntityID in the metadata of the service provider that was set up in the previous section)

1. Click on More
2. Add the attribute names which were created in the DualShield Service Provider.

1. Click OK