Active Directory + Token

[Christopher Yue]

Is anyone setup with Active Directory + Token for Identity and Access Management?

 

Since everything is proxied to via Citrix Cloud Gateway, all users will see this option.

 

I really don't want my LAN based users to be prompted for MFA and was wondering if the introduction of an on premise Storefront server would be the workaround.

 

Any comments would be welcome.

[Donovan Linton1709152286]

Correct, currently the best option is to setup on-prem Storefront for internal users. Also, I've seen some customer user the same cloud.com hostname internally for users

[Christopher Yue]

Hi Donovan,

Just a couple of questions:-

 

Q.

Is granular access using OTP (via IP whitelisting or AD security group) on the roadmap?

 

Q.

Even if I setup an on-premise SF server, I really don't have a means of preventing unauthorised users accessing Citirx outside of the office. Can you advise I could possibly tackle this?

 

Thanks.

[DanielViklund]

Hi, I am wondering the same.

Can I have OTP for users that are member of certain groups.
From what I can see, its all or nothing when I enable AD + Token.