Using iApp for Citrix VDI and APM with SAML - not getting directed to application servers

I used the iApp Citrix VDI template to create the whole configuration (VS, APM policy...) I initially started with using an Active Directory pool of LDAP servers for the AD Auth but was instructed by my IAM group to use SAML.

 

I have set up the BigIP as the SAML SP and it is bound to their (IAM's) IdP.

 

When a user tries to connect to the URL for the Citrix XenApp connection they get the f5 webtop and are prompted to logon.

 

A successful login brings up the IAM "you have successfully logged in" page and does not continue on to one of the Citrix Servers in the pool (that was configured by using the iApp template).

 

Before I switched to SAML from AD Auth using LDAP everything worked fine.

 

I have tried changing the Relay fields to no avail and have not messed with the assertion settings at all.

 

Not sure what to try next.

 

Please advise.

 

Dave