Forum Discussion

SamuelB's avatar
SamuelB
Icon for Nimbostratus rankNimbostratus
Nov 22, 2013

Two-factor authentication for Citrix Receiver for Windows

I have deployed F5 APM with two-factor authentication. APM is currently replacing the Web Interface / Storefront servers. Two-factor authentication is confirmed working for the Webtop, Citrix Receive...
BIG-IP Access Policy Manager (APM)
citrix
security
xenapp
Andrey_Terentye's avatar
Andrey_Terentye
Historic F5 Account
Jun 11, 2015

The 11.6.0 HF5 functionality does not cover: 1. APM Webtop (StoreFront replacement) deployment 2. SMS/OTP authentication

 

What 11.6.0 HF5 enables is ability to display logon dialog with two password fields (for token and AD password) for Windows Receiver client (other clients can be manually configured to display two fields).

 

When Windows Receiver sees two-password dialog it assumes it is talking to StoreFront, hence limitation (1).

 

The two-password dialog is not suitable for SMS/OTP case as token is not know to the user up front (as it is in classic RSA+AD case). With single-password dialog APM does not yet support SMS/OTP workflow for Receivers, hence limitation (2).