Citrix Workspace Authentication: Okta


None of us likes starting over. So if we don’t have to, why would we? Unfortunately, with technology, many of us are forced to to follow a single path. That single path often requires us to start over. But this is one of the interesting things about Citrix Workspace and the user’s primary identity… Don’t… Continue reading Citrix Workspace Authentication: Okta

Citrix Workspace Authentication: Overview


One of the major issues with the current state of the end user computing environment is the number of identities a user is required to remember.  Almost every service or application a user subscribes to requires the user create a new identity and password. With so many identities, almost all of us use the same… Continue reading Citrix Workspace Authentication: Overview

Citrix Workspace Authentication: Citrix Gateway


One of the challenges with using cloud services is getting the same experience you had in an on-premises deployment. For the past 20+ years, many Citrix Virtual Apps and Desktop deployments utilized a Citrix Gateway to provide an ICA proxy through the firewall. For external users, Gateway also authenticated those users. Over the years, admins… Continue reading Citrix Workspace Authentication: Citrix Gateway

Authentication: TOTP


Let’s make one thing perfectly clear… TOTP ≠ OTP OTP = One-Time Password TOTP = Time-based One-Time Password As discussed in the Two-Step Verification post, OTP sends the one-time password to the user’s mobile phone via SMS or to the user’s email address. TOTP, on the other hand, uses a local app on the mobile… Continue reading Authentication: TOTP

Access Control for StoreFront – Demo


I recently talked about how you can add SaaS and web applications to an on-premises StoreFront deployment.  The integration goes beyond simply publishing links to the SaaS and web apps.  The integration utilizes the Citrix Access Control service, providing SSO to SaaS No more passwords. No more access after employees have left the company. Enhanced… Continue reading Access Control for StoreFront – Demo

Synchronize vs Mirror


This has confused me with Citrix Profile Management… What is the difference between synchronizing a folder and mirroring a folder? When I say source and destination, I mean the following: Source = virtual desktop Destination = profile store The descriptions for both sound very similar, so I thought I would dig into this a little… Continue reading Synchronize vs Mirror

x.509 Certificate Rejected for SaaS SSO


I’m trying to setup single sign-on to a new SaaS app with Citrix Access Control and ran into a strange issue. The SaaS app is rejecting my x.509 certificate because it is incorrect. Let’s look at this a little closer. When you create a new SSO configuration for a SaaS app in Citrix Access Control,… Continue reading x.509 Certificate Rejected for SaaS SSO

Website Rendering Issues


I ran into an interesting issue with the URL filtering aspect of Citrix Access Control service for SaaS apps.  I’m trying to do the following: Block categories Malware and SPAM Peer-toper/Torrents Adult Gambling Illegal/Harmful Redirect categories Social networking Allowed websites *.twitter.com Unfortunately, when I access Twitter.com from my SaaS app with enhanced security enabled, I… Continue reading Website Rendering Issues

URL Filtering Decision Flow


When we look at providing enhanced security to SaaS apps with the Citrix Access Control service, I focused on three aspects: SSO to SaaS and web apps Enhanced security for SaaS and web apps URL filtering within SaaS and web apps As we’ve seen with URL filtering, we can allow, deny or redirect specific websites… Continue reading URL Filtering Decision Flow