VeridiumID SAML Configuration
VeridiumID includes SAML capabilities. You can configure VeridiumID server as an identity provider (IdP) to support SAML connections for any SAML compatible app. In this document, we will use Citrix Storefront and Netscaler as two examples.
Citrix StoreFront version 3.9 and later
Citrix NetScaler Gateway version 10 and later
This diagram shows how it works:
![](../../__attachments/3555001070/image-20230327-175329.png?inst-v=ffa2d127-74f7-4a38-ac00-bc62b4eb8eb4)
During step 6, the VeridiumID server will sign the SAML assertion (response). By default this key is stored within the centralized configuration store within VeridiumID. However, you can also configure a hardware security module (HSM) to store the key. For more information, see "Configure an HSM" later in this guide.