I recently talked about how you can add SaaS and web applications to an on-premises StoreFront deployment.  The integration goes beyond simply publishing links to the SaaS and web apps.  The integration utilizes the Citrix Access Control service, providing

• SSO to SaaS
  No more passwords. No more access after employees have left the company.
• Enhanced security for SaaS apps
  No more printing, downloading, copying data locally
• URL filtering within SaaS apps
  No more blind faith that my users understand security implications of selecting a link

The following demonstrates the user and admin experience for enabling this functionality.