Enable Single-Sign-On into Storefront from NetScaler Gateway with Imprivata RADIUS authentication for more than one Active Directory domain.

Instructions

1. Use advanced authentication to create a RADIUS policy with a customized login schema (based on DomainDropdown.xml) that provides a dropdown for users to choose the domain they belong to.
2. Create session policies for each domain using the expression HTTP.REQ.BODY(500).AFTER_STR("domain=").CONTAINS("DomainNameHere") where the domain name specified matches that of the dropdown.
3. Create session profiles for each session policy and specify the appropriate SSO domain name under Published Applications.