Jump to content
Welcome to our new Citrix community!

Gateway 13.1 & azure 2fa


Matthew Riddler

Recommended Posts

Hello,

I am trying to find a solution for providing 2 factor auth from Azure for our citrix environment accessing via Citrix Gateway (v13.1 installed).

I am struggling to find a doc that describes how to configure this. I can see lots of different websites, but they all seem to be slightly different.

 

We have duo setup on a second gateway virtual server, but dont want to be giving out licences for that when all of our users are in AzureAD & are forced for MFA for everything else, just not citrix.

 

I can see that all of my ports are open & nothing is being blocked, but cannot find anything that seems to work with 13.1.

When the radius authentication policy is bound I do get a log in the NPS event log, that NPS Extension for Azure MFA onle performs secondary auth for radius requests in AccessAccept state, request received with response accessreject ignoring request.

 

Happy to try another way to achieve this without using the Gateway vserver, but not aware of what else there is. We have no Citrix cloud presence.

 

Any guidance would be great.

 

Thanks,

Matt

Link to comment
Share on other sites

The user should be entering username and AD password. Then Azure MFA does the user's default two-factor. The user should go to https://mysignins.microsoft.com/security-info to select the default authentication method. It happens automatically without asking the user.

 

Otherwise, maybe your NPS policies are not configured correctly. Or maybe the RADIUS policy on NetScaler doesn't have MS-CHAP configured. 

 

See https://christiaanbrinkhoff.com/2017/02/17/how-to-configure-azure-mfa-for-citrix-netscaler-gateway-radius-by-using-the-new-nps-extension/

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...