When we enable SAML 2.0 on horizon connection servers, users connecting trough external connection are only able to see applicatons & desktops that they are directly assigned to. Desktops&apps that are assigned to users trough group membership are not visible.
Users can see all desktop and apps if SAML authentication is disabled on Horizon connection server.
We use Azure Enterprise apps for SAML.
Connection first goes trough UAG, which is also configured to use same SAML for authentication.
TrueSSO works when SAML is enabled.
