Get started with Citrix Workspace | Citrix Workspace.
Looking for:
Authenticate | Citrix Workspace app for Windows - |
How to login citrix workspace. Get started with Citrix Workspace
How users connect with Citrix Workspace app | VPN configuration on a Citrix Gateway appliance
For more information about using smart cards with StoreFront, see Configure the authentication service in the StoreFront documentation. Conditional Access is a tool used by Azure Active Directory to enforce organizational policies. Workspace administrators can configure and enforce Azure Active Directory conditional access policies for users authenticating to the Citrix Workspace app.
You can configure the following authentication mechanisms with the Citrix Workspace app. For the following authentication mechanisms to work as expected, the Windows machine running the Workspace app must have Microsoft Edge WebView2 Runtime version 99 or later installed. Pass-through authentication single sign-on - Pass-through authentication captures the smart card credentials when users log on to Citrix Workspace app.
Citrix Workspace app uses the captured credentials as follows:. Bimodal authentication - Bimodal authentication offers users a choice between using a smart card and typing the user name and password. For example, the logon certificate has expired. Dedicated stores must be set up per site to allow Bimodal authentication, using the DisableCtrlAltDel method set to False to allow smart cards. Bimodal authentication requires StoreFront configuration. Using the Bimodal authentication, the StoreFront administrator can allow both user name and password and smart card authentication to the same store by selecting them in the StoreFront console.
See StoreFront documentation. Multiple certificates - Multiple certificates can be availed for a single smart card and if multiple smart cards are in use. When you insert a smart card in a card reader, the certificates are applicable to all applications running on the user device, including Citrix Workspace app. Client certificate authentication - Client certificate authentication requires Citrix Gateway and StoreFront configuration.
Smart card-enabled applications - Smart card-enabled applications, such as Microsoft Outlook and Microsoft Office, allow users to digitally sign or encrypt documents available in virtual apps and desktops sessions. Some configuration requires registry edits. Using the Registry editor incorrectly might cause problems that can require you to reinstall the operating system.
To configure Citrix Workspace app for Windows, include the following command-line option during installation:. Single sign-on is another term for pass-through authentication. In the Registry editor, navigate to the following path and set the SSONCheckEnabled string to False if you have not installed the single sign-on component. The key prevents the Citrix Workspace app authentication manager from checking for the single sign-on component and allows Citrix Workspace app to authenticate to StoreFront.
To enable smart card authentication to StoreFront instead of Kerberos, install Citrix Workspace app for Windows with the following command-line options:. Enables credential caching and the use of pass-through domain-based authentication. If the user logs on to the endpoint with a different authentication method, for example, user name and password, the command line is:.
This type of authentication prevents capturing of the credentials at logon time and allows Citrix Workspace app to store the PIN during Citrix Workspace app login. By default, if multiple certificates are valid, Citrix Workspace app prompts the user to choose a certificate from the list. Instead, you can configure Citrix Workspace app to use the default certificate per the smart card provider or the certificate with the latest expiry date. If there are no valid logon certificates, the user is notified, and given the option to use an alternate logon method if available.
Prompt is the default. For SmartCardDefault or LatestExpiry , if multiple certificates meet the criteria, Citrix Workspace app prompts the user to choose a certificate. If your site or smart card has more stringent security requirements, such as to disallow caching the PIN per-process or per-session, you can configure Citrix Workspace app to use the CSP components to manage the PIN entry, including the prompt for a PIN.
A Citrix Virtual Apps session logs off when you remove the smart card. If Citrix Workspace app is configured with smart card as the authentication method, configure the corresponding policy on Citrix Workspace app for Windows to enforce the Citrix Virtual Apps session for logoff. The user is still logged into the Citrix Workspace app session. When you log on to the Citrix Workspace app site using smart card authentication, the user name is displayed as Logged On.
It improves performance when smart cards are used in high-latency WAN environments. Fast smart card logon is enabled by default on the VDA and disabled by default on Citrix Workspace app. To enable fast smart card logon, include the following parameter in the default. To disable fast smart card logon on Citrix Workspace app, remove the SmartCardCryptographicRedirection parameter from the default. For more information, see smart-cards.
This policy enables Citrix Workspace app to log in to Citrix Workspace automatically at system startup. Use this policy only when domain pass-through single sign-on or SSON is configured for Citrix Workspace on domain-joined devices. By default, Citrix Workspace app for Windows automatically populates the last user name entered. How users connect with Citrix Workspace app. Decouple the Citrix Workspace app icon. Configure the Citrix Workspace app home page on Citrix Gateway. Apply the Citrix Workspace app theme to the Citrix Gateway logon page.
Create a custom theme for the Citrix Gateway logon page. Citrix Gateway VPN client registry keys. Enforce the HttpOnly flag on authentication cookies. Customize the user portal for VPN users. Prompt users to upgrade older or unsupported browsers by creating a custom page. Configure domain access for users. Enable clientless access persistent cookies. Save user settings for clientless access through Web Interface.
Configure the Client Choices page. Configure access scenario fallback. Configure connections for the Citrix Secure Access agent. Configure the number of user sessions.
Configure time-out settings. Connect to internal network resources. Configure split tunneling. Configure client interception. Configure name service resolution. Enable proxy support for user connections.
Configure address pools. Support for VoIP phones. Configuring application access for the Citrix Secure Access agent for Java. Document History. Aviso legal. Este texto foi traduzido automaticamente. Este artigo foi traduzido automaticamente. This article outlines the main steps involved in setting up Citrix Workspace and related components, from beginning to end. For a summary of the phases involved, see Workflow overview.
There are other ways to transition to the full Citrix Workspace experience. The most common are by:. The Success Center provides additional solution-based guidance. Before configuring Citrix Workspace, you must sign up to Citrix Cloud and ensure that you meet the technical requirements for getting started with Citrix Workspace. For more information on adding administrators and configuring authentication for administrators, visit Administrators in the Citrix Cloud product documentation.
Phase 2 involves configuring access controls, such as the Workspace URL and external connectivity, in Workspace Configuration. You also configure one or more identity providers in Identity and Access Management , and then enable one of them as the primary way in which subscribers authenticate to workspaces in Workspace Configuration.
There are two ways to access Citrix Workspace. One is through the natively installed Citrix Workspace app , which replaces Citrix Receiver for simple, secure access to Citrix Cloud services and workspaces. For more information, visit Workspace access. This typically involves the following tasks:. After these two tasks, Citrix recommends that you install, and encourage subscribers to use, the Citrix Workspace app for a consistent experience of the workspaces.
For more information on configuring subscriber authentication to workspaces, visit Secure workspaces. You can customize the subscriber experience of workspaces for different users and to meet specific organizational requirements in Workspace Configuration by:. Citrix recommends that you verify the integrity of workspaces with operational acceptance testing and engage with our Success Center to plan how you onboard subscribers. The broad activities for this phase include:.
Comments
Post a Comment