Sso citrix workspace. How to Manually Install and Configure Citrix Receiver for Pass-Through Authentication
Looking for:
Sso citrix workspace |
Sso citrix workspace
Sso citrix workspace
By Product. Citrix Analytics. Citrix Content Collaboration. Citrix Endpoint Management. Citrix Networking. Citrix Secure Internet Access. Citrix Secure Private Access.
Getting Started. Feature Videos. Reference Architectures. Advanced Concepts. Citrix Service Providers. Citrix Virtual Apps and Desktops.
Design Guidance. Citrix Workspace. By Solution. By Content Type. PoC Guides. Tech Briefs. Tech Insights. Design Decisions. Deployment Guides. Tech Papers. Design Guides. The Click-Down Podcast. Citrix Master Class Series. Document History. Aviso legal. Este texto foi traduzido automaticamente.
Este artigo foi traduzido automaticamente. Citrix Workspace provides users with a seamless experience by providing single sign-on to secondary resources. To start, Citrix Workspace allows each organization to choose a primary identity from a growing list of options, which currently includes:. Once the user successfully authenticates to Citrix Workspace with the primary identity, they have authorization to all secondary resources. In cases where the identity provider only includes a single user name and password, like Active Directory, Citrix Workspace includes extra capabilities to improve primary authentication security, like Time-based One Time Password.
To gain a deeper understanding of the primary identity for Citrix Workspace, refer to the Workspace Identity Tech Brief. Many of the applications, desktops, and resources a user accesses within Citrix Workspace are secured with another set of user credentials, referred to as secondary identities.
With Citrix Workspace, users authenticate once with their primary identity and all subsequent authentication challenges to secondary resources are automatically satisfied. How Citrix Workspace provides single sign-on to different resources is based on the type of resource accessed. To better understand the different approaches, it is best to break it down into the following topics:.
From a Citrix Workspace perspective, a SaaS application is a browser-based application hosted in the cloud by a third party. To access the application, users must authenticate with a set of credentials associated with the SaaS application, referred to as a secondary identity. To achieve single sign-on to a SaaS application, Citrix Workspace federates identity between the primary identity and secondary identity. SAML-based authentication works by associating two different user accounts primary and secondary with common attribute s , typically a user principal name UPN or email address.
The user identity can be different between the primary identity from the identity provider and secondary identity from the service provider. In addition, many SaaS applications have the ability to disable the password and direct password access from user accounts when authentication uses SAML. This forces user authentication to always use the primary identity from the identity provider and not the secondary identity from the service provider.
The IdP does not have to contain the primary user account identities. In this example, the primary user identity is contained within the primary user directory Dir.
This URL receives the user assertion. Within Citrix Workspace, the overall process for single sign-on to SaaS applications is as follows:. A web application is a browser-based application hosted and managed by the organization. The web application is hosted within the on-premises data center. To access a web application, users must establish a secure connection to the host and authenticate with a set of credentials associated with the web application, referred to as a secondary identity.
Depending on the web application, the secondary identity could be the same identity as the primary identity used to authenticate to Citrix Workspace or a unique identity managed by a different identity provider.
To achieve single sign-on to a web application, Citrix Workspace federates identity between the primary identity used to sign into Citrix Workspace and the secondary identity used to sign into the web app. The SSO process for web application utilizes multiple approaches to be able to support a larger number of web applications. These approaches can be. Single sign-on to web applications within Citrix Workspace helps solve a few user and admin experience challenges:. Deploy redundant Gateway Connectors to maintain availability when a connector is being updated.
Only one connector gets updated at a time and the process does not continue until a success result is received. Citrix Virtual Apps and Desktops allows users to remotely access Windows and Linux-based applications and desktops. To access a Windows-based virtual application or desktop requires users to authenticate with an Active Directory identity. To achieve single sign-on to a virtual app and desktop, Citrix Workspace utilizes the federated authentication service, which dynamically generates an Active Directory-based virtual smartcard for the user.
The parameters associate an Active Directory identity with an Okta identity. Once the user successfully authenticates to the primary identity, the single sign-on capability within Citrix Workspace uses the parameters to request a virtual smartcard. Within Citrix Workspace, the overall process for single sign-on to a Windows-based virtual application and desktop is as follows:.
If organizations use the cloud-based Citrix Virtual Apps and Desktops Service, the architecture resembles the following:. SSO to Windows-based virtual applications and desktops within Citrix Workspace helps solve a few user and admin experience challenges:. Many organizations currently rely on a 3rd party solution Okta, Ping, Azure, and so on to provide single sign-on to SaaS applications. IdP chaining allows organizations to maintain their current SSO provider while fully integrating with Citrix Workspace, including the implementation of enhanced security policies.
In this IdP chaining example, Citrix Workspace, acting as an identity broker authenticates the user to the primary user directory. Within each SAML link, the common attribute between identity provider and service provider must be the same. As the authentication passes across different links in the chain, the common attribute can change.
This URL receives the user assertion, which includes the common attribute. The app-specific URL acts as a service provider. The easiest way to think of IdP chaining is to focus on each link in the chain individually, which includes one identity provider and one service provider. In this example, the links in the chain are:. Creating an IdP chain allows organizations to maintain their current SSO provider while still unifying all resources within Citrix Workspace.
The development, release and timing of any features or functionality described in the Preview documentation remains at our sole discretion and are subject to change without notice or consultation. The documentation is for informational purposes only and is not a commitment, promise or legal obligation to deliver any material, code or functionality and should not be relied upon in making Citrix product purchase decisions.
Citrix Tech Zone. This content has been machine translated dynamically. Give feedback here. Thank you for the feedback. Translation failed! Author: Daniel Feller. The official version of this content is in English. Some of the Citrix documentation content is machine translated for your convenience only.
Citrix has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Citrix product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Citrix, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated.
Citrix will not be held responsible for any damage or issues that may arise from using machine-translated content. Was this helpful. Send us your feedback. Instructions for Contributors. January 10, Citrix Preview Documentation. This Preview product documentation is Citrix Confidential. If you do not agree, select Do Not Agree to exit. Machine Translation Feedback Form.
Comments
Post a Comment