Application health checking and load balancing CyberArk Privileged Vault Web Access with HAProxy

Would it be possible to you to also show how to configure HAProxy in a way to work with SAML/SSO? I've tried to forward headers, but still ending up with "MSIS3200: No AssertionConsumerService is configured on the relying party trust (...)" error message from ADFS. Not sure if I need to do something else or simple "option forwardfor header X-Client" will not work for this case.