Connect Active Directory to Citrix Cloud

By default, Citrix Cloud uses the Citrix Identity provider to manage the identity information for all users in your Citrix Cloud account. You can change this to use Active Directory (AD) instead.

Active Directory authentication

Connecting your Active Directory to Citrix Cloud involves installing Cloud Connectors in your domain. Citrix recommends installing at least two Cloud Connectors for high availability. For more information, see the following articles:

Additionally, Citrix Cloud supports using tokens as a second factor of authentication for subscribers signing in to their workspaces through Active Directory. Workspace subscribers can generate tokens using any app that follows the Time-Based One-Time Password standard, such as Citrix SSO or Google Authenticator.

For more information about authenticating workspace subscribers with Active Directory plus tokens, see Active Directory plus token.

Connecting your Active Directory to Citrix Cloud involves the following tasks:

  1. Install Cloud Connectors in your domain. Citrix recommends installing two Cloud Connectors for high availability.
  2. If applicable, enable tokens for user devices. Subscribers can enroll only one device at a time.

To connect your Active Directory to Citrix Cloud

  1. From the Citrix Cloud menu, select Identity and Access Management.
  2. From the Authentication tab, in Active Directory, click the ellipsis menu and select Connect. Connect menu for Active Directory
  3. Click Install Connector to download the Cloud Connector software. Install Connector option
  4. Launch the Cloud Connector installer and follow the installation wizard.
  5. From the Connect to Active Directory page, click Detect. After verification, Citrix Cloud displays a message that your Active Directory is connected.
  6. Click Return to Authentication. The Active Directory entry is marked Enabled on the Authentication tab.

To enable Active Directory plus token authentication

  1. Perform Steps 1-5 as described in To connect your Active Directory to Citrix Cloud.
  2. After Citrix Cloud verifies the connection with your Active Directory, click Next. The Configure Token page appears and the Single device option is selected by default. Configure token dialog
  3. Click Save and Finish to complete the configuration. On the Authentication tab, the Active Directory + Token entry is marked as Enabled.
  4. Enable token authentication for workspaces:
    1. From the Citrix Cloud menu, select Workspace Configuration. Workspace Configuration menu
    2. From the Authentication tab, select Active Directory + Token. AD plus token configuration

After enabling Active Directory plus token authentication, Workspace subscribers can register their device and use an authenticator app to generate tokens. Subscribers can register only one device at a time. For instructions to register subscribers’ devices, see Device registration.

For options to re-enroll subscribers’ devices, see To re-enroll devices.