Multiple Azure AD for citrix cloud?

[Jeff Riechers]

So we can bascially setup an unlimited number of on-premise Active directory domains to Citrix Cloud.  But it looks like you can only use a single Azure Active Directory.

 

Is there any way to add multiple Azure AD connections to Citrix Cloud for clients with multiple domains?

[James Kindon]

https://docs.citrix.com/en-us/citrix-secure-private-access/adaptive-authentication-service.html

[James Kindon]

Nope - at the moment to the best of my knowledge it's one only - you would likely need to throw an ADC behind it and do nFactor style work

[Benjamin Toelle]

Is there any news here? Multiple Azure AD Connections should be standard...

[Jeff Riechers]

Yup, working on setting that up now.

[Henrik Christensen1709154275]

On 6/3/2022 at 1:51 PM, Jeff Riechers1709152667 said:

Yup, working on setting that up now.

So how did it go with your setup?

[Tiffanny Renrick1709159914]

Also working on this setup!! Since it is so new, there's not much information on it so once I get it working, I guess I'll be blogging about it.

[Benjamin Toelle]

The only way is adaptive authentication?  is this a premium feature? Why isn't it simply possible to use multiple identity providers via a domain ownership approval or separate subdomains? Citrix Cloud doesn't feel like cloud.

[Jeff Riechers]

It's a premium feature.  Ended up not using it at the client as they already had a delegated Auth environment we could leverage.

[Julian Jakob]

On 9/6/2022 at 10:35 PM, Benjamin Toelle said:

The only way is adaptive authentication?  is this a premium feature? Why isn't it simply possible to use multiple identity providers via a domain ownership approval or separate subdomains? Citrix Cloud doesn't feel like cloud.

 

You have to use Adaptive Auth as IdP - or use your own ADC on Prem / Azure / CSP hosted as IdP, where you are able to configure multiple SAML policies in nFactor. Adaptive Authentication is nothing else than two hosted ADCs (with restricted advanced licenses) on Azure. As there are some misunderstandings with this feature, I've written a post. If you're interested in, checkout https://www.julianjakob.com/citrix-daas-adaptive-authentication/