Forum Discussion
SamuelB
Nimbostratus
12 years agoTwo-factor authentication for Citrix Receiver for Windows
I have deployed F5 APM with two-factor authentication. APM is currently replacing the Web Interface / Storefront servers. Two-factor authentication is confirmed working for the Webtop, Citrix Receive...
David_Glasgow_1
Nimbostratus
12 years agoHi Michael
In short; on the Citrix Access Gateway (VPX).
- Created a Virtual Server...
- Added Primary Authentication, Windows LDAP
- Added Secondary Authentication, Radius for Token
-
Added a new policy - WindowsRT_policy
- Added the expression: REQ.HTTP.HEADER User-Agent CONTAINS CitrixReceiver && REQ.HTTP.HEADER User-Agent CONTAINS WindowsRT
- Create a new Profile - WindowsRT_profile
-
Network Configuration
- Not Configured
-
Client Experience
- Home Page = None
- Split Tunnel = Off
- Session Time Out = 30
- Client Access = Allow
- Client Access URL Encoding = Obscure
- Client Access Persistent Co.. = Allow
- Plug-In Type = Windows/mac OS-X
- Single Sign on to Web Applications = Ticed
- Credential Index = Primary
- Single Sign On with Windows = Unticked
- Client Clean up prompt = Ticked
-
Security
- Default Athorization Action = Allow
- Secure Browse = Ticked
-
Published Application
- ICA Proxy = On
- Web Interface Address = https:///Citrix/UnisonWeb
- Web Interface Portal Mode = Normal
- Single-Signon Domain =
-
Added new Policy - Ipad_policy
- Added the expression: REQ.HTTP.HEADER User-Agent CONTAINS CitrixReceiver && REQ.HTTP.HEADER User-Agent CONTAINS ipad
- Create a new Profile - IPad_profile
-
Network Configuration
- Not Configured
-
Client Experience
- All settings as per Windows Profile
-
Security
- All settings as per Windows Profile
-
Published Application
- Web Interface Address = https://spctxstore1.unison.co.nz/Citrix/Unison/PNAgent/config.xml
- All other settings as per Windows Profile
So within the Windows 8 metro application we are presented with Username, Password and Token fields... same applies to the ipad.
Ideally it would be over two screens, to allow us to use the F5 token feature...
Hope that helps?