Forum Discussion
SamuelB
Nov 22, 2013Nimbostratus
Two-factor authentication for Citrix Receiver for Windows
I have deployed F5 APM with two-factor authentication. APM is currently replacing the Web Interface / Storefront servers. Two-factor authentication is confirmed working for the Webtop, Citrix Receive...
David_Glasgow_1
Jan 23, 2014Nimbostratus
Hi Michael
In short; on the Citrix Access Gateway (VPX).
- Created a Virtual Server...
- Added Primary Authentication, Windows LDAP
- Added Secondary Authentication, Radius for Token
-
Added a new policy - WindowsRT_policy
- Added the expression: REQ.HTTP.HEADER User-Agent CONTAINS CitrixReceiver && REQ.HTTP.HEADER User-Agent CONTAINS WindowsRT
- Create a new Profile - WindowsRT_profile
-
Network Configuration
- Not Configured
-
Client Experience
- Home Page = None
- Split Tunnel = Off
- Session Time Out = 30
- Client Access = Allow
- Client Access URL Encoding = Obscure
- Client Access Persistent Co.. = Allow
- Plug-In Type = Windows/mac OS-X
- Single Sign on to Web Applications = Ticed
- Credential Index = Primary
- Single Sign On with Windows = Unticked
- Client Clean up prompt = Ticked
-
Security
- Default Athorization Action = Allow
- Secure Browse = Ticked
-
Published Application
- ICA Proxy = On
- Web Interface Address = https:///Citrix/UnisonWeb
- Web Interface Portal Mode = Normal
- Single-Signon Domain =
-
Added new Policy - Ipad_policy
- Added the expression: REQ.HTTP.HEADER User-Agent CONTAINS CitrixReceiver && REQ.HTTP.HEADER User-Agent CONTAINS ipad
- Create a new Profile - IPad_profile
-
Network Configuration
- Not Configured
-
Client Experience
- All settings as per Windows Profile
-
Security
- All settings as per Windows Profile
-
Published Application
- Web Interface Address = https://spctxstore1.unison.co.nz/Citrix/Unison/PNAgent/config.xml
- All other settings as per Windows Profile
So within the Windows 8 metro application we are presented with Username, Password and Token fields... same applies to the ipad.
Ideally it would be over two screens, to allow us to use the F5 token feature...
Hope that helps?
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects