Looking for:
Citrix workspace enable single sign-on after install.Use Configuration Checker to validate single sign-on configuration |
Citrix workspace enable single sign-on after install -
About Citrix Workspace app for Windows. Add accounts or switch servers. Change how desktops look and work. Multi-monitor support. Configure composite USB device redirection. Citrix Ready workspace hub. Use Configuration Checker to validate single sign-on configuration.
Display your devices in the Desktop Viewer. Citrix Files. Citrix workspace enable single sign-on after install desktops and apps. Manage sessions through Connection Center. Refresh apps. Regional settings. Relative mouse. Configure shortcuts and reconnect options using GUI. Uninstall Citrix Workspace app for Windows. Use apps when not connected to the internet. View application categories.
Configure Citrix Workspace Updates. Aviso legal. Este texto foi traduzido automaticamente. Este artigo foi traduzido automaticamente. The development, release and timing of any features or functionality described in the Preview documentation remains at our sole discretion and are subject to change without notice or consultation. The documentation is for informational purposes only and is not a commitment, promise or legal obligation to deliver any material, code or functionality and should not be relied upon in making Citrix product citrix workspace enable single sign-on after install decisions.
Нажмите чтобы прочитать больше Workspace app for Windows. This content has been machine translated dynamically. Give feedback here. Thank you for the feedback. Citrix Workspace app Citrix Workspace app for Windows. Translation failed!
The official version of this content is in English. Some of the Citrix documentation content is machine translated for your convenience only. Citrix has no control over machine-translated content, which /33758.txt contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Citrix product увидеть больше service conforms to any machine citrix workspace enable single sign-on after install content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Citrix, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated.
Citrix will free cd dvd driver for windows 10 be held responsible for any damage or issues that may arise from using machine-translated content. Was this helpful. Send us your feedback. Instructions for Contributors. Citrix Основываясь на этих данных Documentation.
This Preview product documentation is Citrix Confidential. If you do not agree, select Do Not Agree to exit.
Configuring Single sign-on to Workspace app | Citrix Workspace app LTSR for Windows - Applicable Products
Along with the existing GPO configuration, you can also disable the storing of authentication tokens on the local disk using the Global App Configuration Service. For more information, see the Global App Configuration Service documentation. Configuration Checker lets you run a test to check if the single sign-on is configured properly. The test runs on different checkpoints of the single sign-on configuration and displays the configuration results.
Click Configuration Checker. The Citrix Configuration Checker window appears. Configuration Checker does not include the checkpoint for the configuration of trust requests sent to the XML service on Citrix Virtual Apps and Desktops servers.
Citrix Workspace app allows you to do a beacon test using the Beacon checker that is available as part of the Configuration Checker utility. The Beacon test helps to confirm if the beacon ping. This diagnostic test helps to eliminate one of the many possible causes for slow resource enumeration, that is the beacon not being available.
Select the Beacon checker option from the list of Tests and click Run. Citrix Workspace app supports Kerberos for domain pass-through single sign-on or SSON authentication for deployments that use smart cards. When enabled, Kerberos authenticates without passwords for Citrix Workspace app. As a result, prevents Trojan horse-style attacks on the user device that try to gain access to passwords. Users can log on using any authentication method and access published resources, for example, a biometric authenticator such as a fingerprint reader.
Enable Kerberos to avoid an extran PIN prompt. To use Kerberos authentication with Citrix Workspace app, check if the Kerberos configuration conforms to the following. Using the Registry editor incorrectly might cause serious problems that can require you to reinstall the operating system.
Use the Registry Editor at your own risk. Make sure you back up the registry before you edit it. Before continuing, see Secure your deployment section in the Citrix Virtual Apps and Desktops document.
This option installs the single sign-on component on the domain-joined computer, enabling your workspace to authenticate to StoreFront using IWA Kerberos. If a security policy prevents you from enabling single sign-on on a device, configure Citrix Workspace app using Group Policy Object administrative template. When you configure the authentication service on the StoreFront server, select the Domain pass-through option.
That setting enables Integrated Windows Authentication. You do not need to select the Smart card option unless you also have non domain-joined clients connecting to StoreFront using smart cards. For more information about using smart cards with StoreFront, see Configure the authentication service in the StoreFront documentation.
Conditional Access is a tool used by Azure Active Directory to enforce organizational policies. Workspace administrators can configure and enforce Azure Active Directory conditional access policies for users authenticating to the Citrix Workspace app. You can configure the following authentication mechanisms with the Citrix Workspace app. For the following authentication mechanisms to work as expected, the Windows machine running the Workspace app must have Microsoft Edge WebView2 Runtime version 99 or later installed.
Pass-through authentication single sign-on - Pass-through authentication captures the smart card credentials when users log on to Citrix Workspace app. Citrix Workspace app uses the captured credentials as follows:. Bimodal authentication - Bimodal authentication offers users a choice between using a smart card and typing the user name and password. For example, the logon certificate has expired.
Dedicated stores must be set up per site to allow Bimodal authentication, using the DisableCtrlAltDel method set to False to allow smart cards. Bimodal authentication requires StoreFront configuration. Using the Bimodal authentication, the StoreFront administrator can allow both user name and password and smart card authentication to the same store by selecting them in the StoreFront console. See StoreFront documentation. Multiple certificates - Multiple certificates can be availed for a single smart card and if multiple smart cards are in use.
When you insert a smart card in a card reader, the certificates are applicable to all applications running on the user device, including Citrix Workspace app. Client certificate authentication - Client certificate authentication requires Citrix Gateway and StoreFront configuration.
Smart card-enabled applications - Smart card-enabled applications, such as Microsoft Outlook and Microsoft Office, allow users to digitally sign or encrypt documents available in virtual apps and desktops sessions. Some configuration requires registry edits.
Using the Registry editor incorrectly might cause problems that can require you to reinstall the operating system. To configure Citrix Workspace app for Windows, include the following command-line option during installation:. Single sign-on is another term for pass-through authentication. In the Registry editor, navigate to the following path and set the SSONCheckEnabled string to False if you have not installed the single sign-on component.
The key prevents the Citrix Workspace app authentication manager from checking for the single sign-on component and allows Citrix Workspace app to authenticate to StoreFront. To enable smart card authentication to StoreFront instead of Kerberos, install Citrix Workspace app for Windows with the following command-line options:. Enables credential caching and the use of pass-through domain-based authentication. If the user logs on to the endpoint with a different authentication method, for example, user name and password, the command line is:.
This type of authentication prevents capturing of the credentials at logon time and allows Citrix Workspace app to store the PIN during Citrix Workspace app login. By default, if multiple certificates are valid, Citrix Workspace app prompts the user to choose a certificate from the list.
Instead, you can configure Citrix Workspace app to use the default certificate per the smart card provider or the certificate with the latest expiry date.
If there are no valid logon certificates, the user is notified, and given the option to use an alternate logon method if available. Prompt is the default. For SmartCardDefault or LatestExpiry , if multiple certificates meet the criteria, Citrix Workspace app prompts the user to choose a certificate.
If your site or smart card has more stringent security requirements, such as to disallow caching the PIN per-process or per-session, you can configure Citrix Workspace app to use the CSP components to manage the PIN entry, including the prompt for a PIN.
A Citrix Virtual Apps session logs off when you remove the smart card. If Citrix Workspace app is configured with smart card as the authentication method, configure the corresponding policy on Citrix Workspace app for Windows to enforce the Citrix Virtual Apps session for logoff.
The user is still logged into the Citrix Workspace app session. When you log on to the Citrix Workspace app site using smart card authentication, the user name is displayed as Logged On.
It improves performance when smart cards are used in high-latency WAN environments. Fast smart card logon is enabled by default on the VDA and disabled by default on Citrix Workspace app. To enable fast smart card logon, include the following parameter in the default. To disable fast smart card logon on Citrix Workspace app, remove the SmartCardCryptographicRedirection parameter from the default. Click Add to create a profile.
Specify the following details in the Create Access Gateway Session Profile dialog box: Specify a name for the profile. Select the Override Global option to override the global settings. Activate the Security tab. Specify the Web Interface address. Ensure that you specify the complete URL. Click Create. Click Close. Click Add to create a policy. Select the required profile from the Request Profile list.
Expand the Access Gateway node and select the Virtual Servers node. Open the required SSL virtual server. Click Insert Policy. Select the required session policy from the Policy Name list, as shown in the following screen shot: Activate the Published Applications tab. Click the Add link in the Security Ticket Authority section. Click Next.
Select Certificates. Click Add. Select Computer account in the Certificates snap-in dialog box, as shown in the following screen shot: Select Local Computer and click Finish. Click OK. Select All Tasks form the shortcut menu. Click Import from the All Tasks menu, as shown in the following screen shot: Import the certificate using the Certificate Import wizard. Was this page helpful? Thank you! Sorry to hear that.
No comments:
Post a Comment