Citrix Endpoint Management

Authentication with an on-premises Citrix Gateway through Citrix Cloud (Preview)

December 14, 2020

Contributed by:

K C

This feature is available as a preview. To enable authentication with an on-premises Citrix Gateway using Citrix Cloud, contact your Citrix support representative.

Endpoint Management supports authentication with an on-premises Citrix Gateway for users enrolling through Citrix Secure Hub. Citrix Gateway as an identity provider is available for iOS devices and Android devices that run in the legacy Device Administration mode. This authentication method does not yet support Android Enterprise.

Note:

Endpoint Management doesn’t support authentication with an on-premises Citrix Gateway through Citrix Cloud for enrollment invitations. If you send users an enrollment invitation containing an enrollment URL, users authenticate through LDAP instead of an on-premises Citrix Gateway as an identity provider.

If you use this authentication method, you must use certificate-based authentication for MDM enrollments. For more information, see Client certificate or certificate plus domain authentication.

Prerequisites for authentication with Citrix Gateway

Citrix Gateway configured for certificate-based authentication
Secure Hub 20.5.0 and later

Configure Citrix Cloud to use Citrix Gateway as your identity provider

To set up Citrix Gateway authentication in Citrix Cloud, see Connect an on-premises Citrix Gateway as an identity provider to Citrix Cloud.

Configure the Citrix identity provider as the IdP type for Endpoint Management

After you configure Citrix Gateway in Citrix Cloud, configure Endpoint Management as follows.

In the Endpoint Management console, go to Settings > Identity Provider (IdP) and then click Add.
In the Identity Provider (IdP) page, configure the following:
- IdP Name: Type a unique name to identify the IdP connection that you are creating.
- IdP Type: Choose Citrix Identity Platform.
- Authentication Domain: Select the authentication domain as listed in the menu. This domain is the same authentication domain as configured under Identity and Access Management > Authentication for Citrix Workspace Configuration in Citrix Cloud.
Click Next. In the IdP Claims Usage page, configure the following:
- User Identifier type: This field is set to userPrincipalName.
- User Identifier string: This field is automatically filled.
Click Next, review the Summary page, and then click Save.

Users can now enroll using Citrix Gateway as an identity provider.

The official version of this content is in English. Some of the Citrix documentation content is machine translated for your convenience only. Citrix has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Citrix product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Citrix, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Citrix will not be held responsible for any damage or issues that may arise from using machine-translated content.

Authentication with an on-premises Citrix Gateway through Citrix Cloud (Preview)

December 14, 2020

Contributed by:

K C

December 14, 2020

Contributed by:

K C

Authentication with an on-premises Citrix Gateway through Citrix Cloud (Preview)

Prerequisites for authentication with Citrix Gateway

Configure Citrix Cloud to use Citrix Gateway as your identity provider

Configure the Citrix identity provider as the IdP type for Endpoint Management

In this article