Source: https://docs.citrix.com/en-us/federated-authentication-service/2112/federated-authentication-service-2112.pdf