Administration

Procedure
1 Start the ADSI Edit utility on your Connection Server host.
2 Expand the ADAM ADSI tree under the object path:
dc=vdi,dc=vmware,dc=int,ou=Properties,ou=Global,cn=Common Attributes.
3 Select Action > Properties, and add the values for the entries pae-SAMLProxyName and pae-
SAMLProxyPort.
Change the Expiration Period for Service Provider Metadata on
Connection Server
If you do not change the expiration period, Connection Server will stop accepting SAML assertions
from the SAML authenticator, such as a Unified Access Gateway appliance or a third-party identity
provider, after 24 hours, and the metadata exchange must be repeated.
Use this procedure to specify the number of days that can elapse before Connection Server stops
accepting SAML assertions from the identity provider. This number is used when the current
expiration period ends. For example, if the current expiration period is 1 day and you specify 90
days, after 1 day elapses, Connection Server generates metadata with an expiration period of 90
days.
Prerequisites
See the Microsoft TechNet Web site for information on how to use the ADSI Edit utility on your
Windows operating system version.
Procedure
1 Start the ADSI Edit utility on your Connection Server host.
2 In the console tree, select Connect to.
3 In the Select or type a Distinguished Name or Naming Context text box, type the
distinguished name DC=vdi, DC=vmware, DC=int.
4 In the Computer pane, select or type localhost:389 or the fully qualified domain name
(FQDN) of the Connection Server host followed by port 389.
For example: localhost:389 or mycomputer.example.com:389
5 Expand the ADSI Edit tree, expand OU=Properties, select OU=Global, and double-click
CN=Common in the right pane.
6 In the Properties dialog box, edit the pae-NameValuePair attribute to add the following values
cs-samlencryptionkeyvaliditydays=number-of-days
cs-samlsigningkeyvaliditydays=number-of-days
In this example, number-of-days is the number of days that can elapse before a remote
Connection Server stops accepting SAML assertions. After this period of time, the process of
exchanging SAML metadata must be repeated.
Horizon 7 Administration
VMware, Inc. 79