Support for Enterprise web apps

Web apps delivery using Citrix Gateway service enables enterprise specific applications to be delivered remotely as a web-based service. Commonly used web apps include SharePoint, Confluence, OneBug, and so on.

Web apps can be accessed using Citrix Workspace using Citrix Gateway service. The Citrix Gateway service coupled with Citrix Workspace provides a unified user experience for the configured Web apps, SaaS apps, configured virtual apps, or any other workspace resources.

Ways to configure Enterprise web apps

Enterprise web apps can be configured and published in the following two ways:

Configuring and publishing Enterprise web apps manually

The following configuration takes the SharePoint app as an example to configure and publish an app manually:

  1. On the Citrix Gateway service tile, click Manage.

  2. Click Add a Web/SaaS App tab below the Single Sign On tile.

  3. Click Skip to configure the SharePoint app manually.

    localized image

  4. Check Inside my corporate network radio button. Enter the following details in the App Details section and click Next.

    Name – Name of the application that you are adding.

    URL – URL with your customer ID. The URL must contain your customer ID (Citrix Cloud customer ID). To get your customer ID, see Sign up for Citrix Cloud. In case SSO fails or you do not want to use SSO, the user is redirected to this URL.

    Related URLs – Related domain is auto-populated based on the URL that you have provided. You can add more than one related domain.

    Icon – Click Change to change the app icon. The icon file size must be 128x128 pixels. If you do not change the icon, the default icon is displayed.

    Description – This description that you enter here is displayed to your users in workspace.

    localized image

  5. In the Enhanced Security section, select Enable enhanced security to choose the security options you would like to apply to the application. The following enhanced security options can be enabled for the application.

    • Restrict clipboard access: Disables cut/copy/paste operations between the app and system clipboard
    • Restrict printing: Disables ability to print from within the Citrix Workspace app browser
    • Restrict navigation: Disables the next/back app browser buttons
    • Restrict downloads: Disables the user’s ability to download from within the app
    • Display watermark: Displays a watermark on the user’s screen displaying user name and IP address of the user’s machine

    localized image

    Select Enforce policy on mobile device to enable the previously mentioned enhanced security options on your mobile device.

    Note: When Enforce Policy on Mobile Device is selected along with Enable enhanced security, the user experience for the application access is negatively impacted for the desktop users and the mobile users.

  6. Now you must connect to a resource location. You can either select an existing resource location or create a new one. To choose an existing resource location, click one of the resource locations from the list of resource locations, for example My Resource Location, and click Next. For guidance on adding a new resource location, click

    localized image

  7. Select your preferred single sign-on type to be used for your application and click Save. The following single sign-on types are available.

    localized image

    • Basic – If your back-end server presents you with a basic-401 challenge, choose Basic SSO.
    • Kerberos – If your back-end server presents you with negotiate-401 challenge, choose Kerberos.
    • Form-Based – If your back-end server presents you with an HTML form for authentication, choose Form-Based.
    • Don’t use SSO – Use Don’t use SSO option when you do not need to authenticate user on the back end server.

    Note: You do not need to enter configuration details for the above SSO types except the form based SSO.

    Enter the following Form-based configuration details in the Single Sign On section and click Save.

    • Action URL - Type the URL to which the completed form is submitted.

    • Logon form URL – Type the URL on which the logon form is presented.

    • Username Format - Select a format for the user name.

    • Username Form Field – Type a user name attribute.

    • Password Form Field – Type a password attribute.

    Note: When Don’t use SSO option is selected, the user is redirected to the URL configured under App details section.

  8. Click Finish.

  9. The following screen appears indicating that the app has been added to the library.

    localized image

  10. On the Citrix Cloud screen, click View Library tab under Library Offerings. Notice that the newly added app features in your library

    localized image

  11. To assign users for the app, hover your pointer over the ellipses on the right, and click Manage Subscribers.

    localized image

  12. Click Choose a domain list and select a domain. Click Choose a group or user and assign users.

    localized image

    Note: A subscribed user can be unsubscribed by selecting the user and clicking the delete icon next to Status.

  13. To obtain the Workspace URL to be shared with app users, on Citrix Cloud, click menu icon and navigate to Workspace Configuration.

    localized image

Editing a published app

To edit a published app, perform the following steps:

  1. Go to Library and identify the app to be edited.

  2. Hover your pointer over the ellipses on the right and click Edit.

  3. Edit the entries under App Details section and click Save.

  4. Edit the entries under Single Sign On section, click Save, and click Finish.

Deleting a published app

To delete a published app, perform the following steps:

  1. Go to Library and identify the app to be deleted.
  2. Click the dot icon on the right and click Delete.

Launching a configured app – end-user flow

To launch a configured app, perform the following steps:

  1. Log on to Citrix Workspace with AD user credentials.
  2. Admin configured app is shown.
  3. Click the app to launch the app.
  4. The app is launched and the user is signed-in to the app.