Diagnose conditional authentication failures

Conditional authentication allows Citrix Cloud admins to direct end users to different Identity Providers (IdPs) during the Workspace login flow based on policy conditions you set. This means different end users will have varying levels of access verification based on risk factors established by the Administrator. For more information on Conditional authentication, see Conditional authentication.

Whenever any conditional authentication fails, you can use the transaction ID available in the failure message and search in the Monitor for the failure details. Monitor helps you to troubleshoot conditional authentication failure events by displaying failure reasons and conditional policies on the Monitor UI.

Viewing conditional authentication failures

To view the conditional authentication failure, follow these steps:

  1. Copy the transaction ID for the failed session that uses conditional authentication.
  2. On the Monitor dashboard, click Search.
  3. Select Transaction ID from the drop-down list.
  4. Paste the copied transaction ID. Click the search result and the transaction ID details page appears.

Conditional Authentication Failures

Transaction ID details

The following details are displayed on the Transaction ID details page:

Field Description
Status Displays the status of the conditional authentication. Possible values are Success or Failed.
Login Time The time of the login.
Workspace URL The store URL of the Citrix Workspace app.
Error Details  
Error Code

Displays the error code. The possible error codes are
100 - This error occurs when no match is found during policy evaluation.
200 - This is an internal error. If the issue persists, contact Citrix support team.
Error Description Displays the description of the error.
Verify Configured Policies  
Policy Name Displays the policy name.
Policy ID Displays the policy ID.
Status Displays the status of the policy.
Policy Condition Evaluation  
Type Displays the policy condition type.
Condition Criteria Displays the condition criteria.
Value Displays the policy condition value.
Condition Result Displays the result of the policy evaluation.
Diagnose conditional authentication failures