Questions about configuring DaaS (Server VDA) with Azure AD

[KK Lee]

Hi, I want to deploy an application (formerly XenApp) using Citrix DaaS in an environment with users only in Azure AD.
I have seen various documentation but still not sure how to configure it, so any help is much appreciated.

 

How should I configure if I'm in the following environment?
- User accounts are only in Azure Active Directory (aka ‘In cloud’).
- Workspace Authentication: Azure Active Directory
- VDA OS: Windows Server 2022

I have tried creating with several different Machine Identities using MCS, but after logging into the workspace with my Azure AD account, I am unable to access the VDA.

I'm not sure what the reason is.

Do I need to configure Citrix FAS or AAD Domain Service?

 

I'm a newbie when it comes to Azure AD, so forgive me if my questions aren't very detailed.

[CarlStalhood]

Did you review the documentation? https://docs.citrix.com/en-us/citrix-daas/install-configure/machine-identities.html

[KK Lee]

10 hours ago, Carl Stalhood1709151912 said:

Did you review the documentation? https://docs.citrix.com/en-us/citrix-daas/install-configure/machine-identities.html

 

Thank you for your reply.
I have reviewed the link you provided and also https://support.citrix.com/article/CTX224111.

 

After reviewing, I'm wondering if this is correct.
1. since our current user accounts base is Azure AD, we need to create Azure Active Directory Domain Services (AAD DS).
2. If so, is the VDA joining the AAD DS?
3. To join AAD DS, should I set the Machine Identities to 'On-premises Active Directory' when creating the MCS?

 

Thank you for reading this far.

[CarlStalhood]

https://docs.citrix.com/en-us/citrix-daas/install-configure/machine-identities/azure-active-directory-joined.html says that the machines don't need to be domain-joined and regular AD is not needed.

[KK Lee]

Thanks Carl,

 

I will to use a Non-domain-joined.
I have verified that Workspace is authenticated with AAD and VDA is connecting on NDJ.

There isn't much documentation on NDJ yet, so I don't have much to go on.

 

Thanks for your help.