Jump to content
Welcome to our new Citrix community!
  • 0

Configuring FAS for only for external access


Hi all:

I have more experience in NetScaler than in Citrix Virtual Apps and Desktops and I have some doubts about FAS.  is it possible to configure FAS just for external access, and the internal access are not affected by this configuration? I have thought to keep the same Citrix Gateway virtual server for internal and external access, and depending on the IP address, external users will be redirected to the 3r party authentication platform (SAML iDP) and the internal users keep accessing using domain credentials. But I don't know if the SSO to the VDAs is going to work for these two type of access. As fas as I know,  it is necessary to configure a GPO for Storefront, VDAs and FAS server to generate the user certificate, but in the case the same users can connect internally to the same VDA using domain credentials, will SSO work?

Thank you for your support

Link to comment

2 answers to this question

Recommended Posts

  • 0

If FAS is enabled for a StoreFront store, then StoreFront will use FAS for all of that store's users no matter how they authenticate to StoreFront. I'm not aware of enabling FAS causing any problems with SSO.


FAS is a per-store setting so if you don't want it enabled for some users then create a new store and instruct those users how to use the new store.

Link to comment
  • 0

I have often have a store for FAS that the ADC will utilise, and a store for normal auth that thin clients or internal users might use


One thing to watch for, is that if you enable FAS on an external Store, and then try to launch apps from an internal store, the internal store must be enabled for FAS also else you will fail to auth

Link to comment

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...