Azure AD MFA with saml auth using Citrix workspace app

[@melaniolopez6645]

How you configure the saml application in Azure and the citrix ADC?

[@percyfernandozevallosrodri7199]

Hi, this is saml auth, using citrix cloud virtual apps and desktops and citrix gateway service????

[@jeremycooper8150]

Are you using a Citrix Gateway in this?

[@c4rm0]

Hi Jeremy yes this is through a NetScaler Gateway

[@jeremycooper8150]

Thanks@@c4rm0 .On the gateway, what are URL's for the web interface address and account services? Running into an issue myself where web works fine but native receiver/workspace does not configure when using SAML.

[@jeremycooper8150]

@@c4rm0 Or if you have a guide/video for how the gateway and StoreFront setup was completed so I can see what may have been missed.

[@c4rm0]

@@jeremycooper8150 I have two session polices/profiles one for RFW the other for native Receiver they have the correct expressions on the policy for example HTTP.REQ.HEADER("User-Agent").CONTAINS("Citrixreceiver") for native Receiver. On the Receiver Session profile under published applications i have ICA proxy on and WI address configured to my FAS enabled Storefront store which has fully delegate credentials to the Netscaler enabled as a auth method. SSO domain is empty and i don't use account services address as don't use email based discovery

[@c4rm0]

@@jeremycooper8150 Not Azure MFA using SAML but close enough (its okta using saml) and has my storefront and Netscaler config c4rm0.wordpress.com/netscaler-mfa-with-saml-using-okta-as-idp-and-citrix-fas-for-sso-to-vdas/

[@chenmingwang9245]

do it work on IOS or android devices?

[@c4rm0]

Last time i checked workspace app for ios didnt support nfactor and saml