Pricing  Get Quote


How to configure single sign-on for Citrix ShareFile

ADSelfService Plus supports Active Directory (AD)-based single sign-on (SSO) for Citrix ShareFile and many other SAML-enabled applications. When SSO is enabled for Citrix ShareFile, users only have to login once into ADSelfService Plus - the identity provider. After logging in, users can securely access their Citrix ShareFile account without having to enter their username and password again.

ADSelfService Plus supports both Identity Provider (IdP) and Service Provider (SP)-initiated SSO for Citrix ShareFile.

IdP-initiated SSO for Citrix ShareFile: Users need to log in to the ADSelfService Plus self-service portal first, and then click on the Citrix ShareFile icon on the Applications dashboard to access Citrix ShareFile.

SP-initiated SSO for Citrix ShareFile: When users access Citrix ShareFile via a URL or bookmark, they are routed to the login page of ADSelfService Plus. After they log in, they will be redirected and logged into Citrix ShareFile automatically.

Follow the step-by-step guide given below to configure SSO for Citrix ShareFile

Before you begin

Download and install ADSelfService Plus if you haven’t already.

Configuring your Active Directory domain in ADSelfService Plus

ADSelfService Plus utilises the existing AD domain credentials for authenticating users during SSO. This makes the configuration of AD domains in ADSelfService Plus necessary before enabling SSO for Citrix ShareFile.

By default, ADSelfService Plus will try to add all the domains that it can discover in the network. If the required domains are automatically added, skip to step 9; otherwise, follow the steps below and add the domains manually.

  1. Log into ADSelfService Plus web console using admin credentials.
  2. Click the Domain Settings link located on the top-right corner of the page.
  3. An Add Domain Details window will appear.
  4. In the Domain Name field, enter the name of the domain you want to add.
  5. In the Add Domain Controllers field, click Discover. ADSelfService Plus will try to automatically discover the domain controllers associated with the specified domain.
  6. If the domain controllers are not auto-discovered automatically, enter the domain controller name in the field provided, and click Add.
  7. You can leave the authentication fields empty if you're not going to use the end user self-service features of ADSelfService Plus.
  8. In Add Domain Details window, click Add.
  9. Getting the SSO/SAML Details from ADSelfService Plus

  10. Navigate to Configuration → Self-Service → Password Sync/Single Sign On.
  11. In the dashboard which displays the list of applications supported by ADSelfService Plus, click Citrix ShareFile.
  12. Click Download SSO Certificate located on the top-right corner of the page.
  13. In the pop-up that appears, copy the Login URL and Logout URL.
  14. Click Download SSO Certificate link to download the PEM file.
  15. sso-saml-details

    Configuring SSO settings in Citrix ShareFile

  16. Log into Citrix ShareFile with administrator credentials.
  17. Navigate to Settings → Admin Settings → Security → Login & Security Policy.
  18. sharefile-login-security-policy

  19. Scroll down to the Single sign-on / SAML 2.0 Configuration section and copy of the SP-initiated Login URL.
  20. sp-initiated-login-url-details

  21. Check the Enable SAML option under the Basic Settings section.
  22. sso-basic-settings

  23. In the Your IDP Issuer/Entity ID field, enter the Login URL in step 12.
  24. Open the PEM file from step 13 in a text editor (like Notepad), and copy the entire contents of the file (including the -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- lines). Paste the certificate file text in the X.509 Certificate field.
  25. In the Login URL field, enter the Login URL in step 12.
  26. In the Logout URL field, enter the Logout URL in step 12.
  27. Click Save.
  28. Adding your Citrix ShareFile domain in ADSelfService Plus and enabling SSO

  29. Navigate to ADSelfService Plus’ Citrix ShareFile configuration page.
  30. In the Domain Name field, enter the name of the domain for which you have enabled SSO.
  31. In the Display Name field, provide an appropriate display name.
  32. In the SAML Redirect URL, enter the SP-initiated Login URL from step 15.
  33. Provide an appropriate description in the Description field.
  34. In the Available Policies field, select the policies for which SSO must be enabled.

    Note: ADSelfService Plus allows you to create OU and group-based policies for your AD domains. To create a policy, go to Configuration → Self-Service → Policy Configuration → Add New Policy. Click Select OUs/Groups, and make the selection based on your requirements. You need to select at least one self-service feature.

  35. citrix-sharefile-sso-configuration

  36. Click Save.

That’s it! Now users can log into their Citrix ShareFile account automatically using single sign-on.

Unify access to cloud and on-premises applications using SAML SSO.

  • Please enter a business email id
    By clicking 'Get Your Free Trial', you agree to processing of personal data according to the Privacy Policy.


Your download is in progress and it will be completed in just a few seconds!
If you face any issues, download manually here


Password self-service

Free Active Directory users from attending lengthy help desk calls by allowing them to self-service their password resets/ account unlock tasks. Hassle-free password change for Active Directory users with ADSelfService Plus ‘Change Password’ console. 

One identity with Single sign-on

Get seamless one-click access to 100+ cloud applications. With enterprise single sign-on, users can access all their cloud applications with their Active Directory credentials. Thanks to ADSelfService Plus! 

Password/Account Expiry Notification

Intimate Active Directory users of their impending password/account expiry by mailing them these password/account expiry notifications.

Password Synchronizer

Synchronize Windows Active Directory user password/account changes across multiple systems, automatically, including Office 365, G Suite, IBM iSeries and more. 

Password Policy Enforcer

Ensure strong user passwords that resist various hacking threats with ADSelfService Plus by enforcing Active Directory users to adhere to compliant passwords via displaying password complexity requirements.

Directory Self-UpdateCorporate Search

Portal that lets Active Directory users update their latest information and a quick search facility to scout for information about peers by using search keys, like contact number, of the personality being searched.

ADSelfService Plus trusted by

A single pane of glass for complete self service password management