You can separate user authentication from VDA authorization. This could be using SAML (Okta, Azure AD...) or it could be for AD. Depends on the situation. You really want your Cloud Connectors to be on the same domain as your VDAs for registration and communication purposes.
Check out this article for splitting authentication and authorization roles:
Also check out this article for complex AD environments:
DaaS inquiry
in General Questions
Posted
Hey Amin,
You can separate user authentication from VDA authorization. This could be using SAML (Okta, Azure AD...) or it could be for AD. Depends on the situation. You really want your Cloud Connectors to be on the same domain as your VDAs for registration and communication purposes.
Check out this article for splitting authentication and authorization roles:
Also check out this article for complex AD environments:
https://support.citrix.com/article/CTX134971/successfully-deploying-xendesktop-in-a-complex-active-directory-environment
Brian