DaaS inquiry

[Amin Herbawi]

Greetings,

Is it possible to have Cloud Connectors in a different domain from the VDA servers ?

Basically, I want to authenticate users against a different domain than the ones VDA machines are using.

[Mr Brian Olsen]

Hey Amin,

You can separate user authentication from VDA authorization.  This could be using SAML (Okta, Azure AD...) or it could be for AD. Depends on the situation.  You really want your Cloud Connectors to be on the same domain as your VDAs for registration and communication purposes.

Check out this article for splitting authentication and authorization roles:

Also check out this article for complex AD environments:

https://support.citrix.com/article/CTX134971/successfully-deploying-xendesktop-in-a-complex-active-directory-environment

Brian