Citrix Managed Desktops service for Citrix Service Providers

This article describes how Citrix Service Providers (CSP) can set up the Citrix Managed Desktops service for tenant customers in Citrix Cloud. For an overview of the features available for Citrix Partners, see Citrix Cloud for Partners.

Requirements

Limitations

  • Tenant name changes take up to 24 hours to apply across all interfaces.
  • When creating a tenant, the email address must be unique.
  • Management filtering by tenant is not available. To see the resources attached to a tenant, select Show items for in the management pane.

Known issues

  • After a tenant is assigned to a resource, you cannot remove or unassign them.
  • The management console does not enforce tenant user separation. You are responsible for adding users to the appropriate catalogs and resources.
  • After adding Citrix Managed Desktops to a customer:

    • You cannot remove it from a customer.
    • You cannot remove the link between the customer and the CSP.

Add a customer

  1. Sign in to Citrix Cloud with your CSP credentials. Click Customers in the upper left menu.
  2. From the Customer dashboard, click Invite or Add. Provide the requested information.

    If the customer does not have a Citrix Cloud account, adding the customer creates a customer account. Adding the customer also automatically adds you as a full access administrator of that customer’s account.

  3. If the customer has a Citrix Cloud account:

    1. A Citrix Cloud URL displays, which you copy and send to the customer. For details of this process, see Inviting a customer to connect.
    2. The customer must add you as a full access administrator to their account. See Add administrators to a Citrix Cloud account.

You can add more administrators later and control which customers they can see on the Citrix Managed Desktops Manage and Monitor dashboards.

Add Citrix Managed Desktops to a customer

  1. Sign in to Citrix Cloud with your CSP credentials. Click Customers in the upper left menu.
  2. From the Customer dashboard, select Add Service in the ellipsis menu for the customer.
  3. In Select a Service to Add, click Citrix Managed Desktops.
  4. Click Continue.

After you complete this procedure, the customer is onboarded to your Citrix Managed Desktops subscription.

When the onboarding completes, a new tenant is created automatically in the Citrix Managed Desktops. The tenant is visible in the management console. This tenant is unique to that customer.

Filter resources by customer (multitenant deployments)

You can filter resources by customer on the Citrix Managed Desktops Manage dashboard. (By default, all resources are displayed.) When working with resources such as catalogs, master images, and Azure subscriptions, you can select specific customer displays to help organize your tenants’ resources.

SD-WAN connections are created on a per-tenant basis. The tenant must have an SD-WAN Orchestrator service entitlement.

  • To create an SD-WAN connection for a tenant, follow the guidance in Create an SD-WAN connection. On the Add a network connection page, select the tenant. You can select the SD-WAN connection type box only if that tenant has an SD-WAN Orchestrator service entitlement.
  • For the connection creation to succeed, the tenant must also have an installed Master Control Node (MCN). However, only the SD-WAN Orchestrator service entitlement determines whether the SD-WAN connection type can be selected.

Create catalogs to deliver apps and desktops

A catalog is a group of users and the collection of virtual machines they have access to. When you create a catalog, a master image is used (with other settings) as a template for creating the machines. For details, see Create catalogs.

Federated domains

Federated domains enable customer users to use credentials from a domain attached to your resource location to sign in to their workspace. You can provide dedicated workspaces to your customers that their users can access through a custom workspace URL (for example, customer.cloud.com), while the resource location remains on your Citrix Cloud account.

You can provide dedicated workspaces alongside the shared workspace that customers can access using your CSP workspace URL (for example, csppartner.cloud.com). To enable customer access to their dedicated workspace, you add them to the appropriate domains that you manage.

After configuring the workspace through Workspace Configuration, customers’ users can sign in to their workspace and access the apps and desktops that you’ve made available.

Add a customer to a domain

  1. Sign in to Citrix Cloud with your CSP credentials. Click Customers in the upper left menu.
  2. From the Customer dashboard, select Identity and Access Management in the upper left menu.
  3. On the Domains tab, select Manage Federated Domain in the domain’s ellipsis menu.
  4. On the Manage Federated Domain card, in the Available customers column, select a customer you want to add to the domain. Click the plus sign next to the customer name. The selected customer now appears in the Federated customers column. Repeat to add other customers.
  5. When you’re done, click Apply.

Remove a customer from a domain

When you remove a customer from a domain that you manage, the customer’s users can no longer access their workspaces using credentials from your domain.

  1. From Citrix Cloud, select Identity and Access Management in the upper left menu.
  2. On the Domains tab, select Manage Federated Domain from the ellipsis menu for the domain you want to manage.
  3. From the list of federated customers, locate or search for the customers you want to remove.

    • Click X to remove a customer.
    • To remove all listed customers from the domain, click Remove all.

    The selected customers move to the list of Available customers.

  4. Click Apply.
  5. Review the customers you selected, and then click Remove Customers.

Add an administrator with restricted access

  1. Sign in to Citrix Cloud with your CSP credentials. Click Customers in the upper left menu.
  2. From the Customer dashboard, select Identity and Access Management in the upper left menu.
  3. On the Administrators tab, click Add Administrators From, and then select Citrix Identity.
  4. Type the email address of the person you’re adding as an administrator, and then click Invite.
  5. Configure the appropriate access permissions for the administrator. Citrix recommends selecting Custom access, unless you want the administrator to have management control of Citrix Cloud and all subscribed services.
  6. Select one or more role and scope pairs for Citrix Managed Desktops, as needed.
  7. When you’re done, click Send Invite.

When the administrator accepts the invitation, they have the access that you assigned.

Edit Delegated Administration permissions for administrators

  1. Sign in to Citrix Cloud with your CSP credentials. Click Customers in the upper left menu.
  2. From the Customer dashboard, select Identity and Access Management in the upper left menu.
  3. On the Administrators tab, select Edit Access from the ellipsis menu for the administrator.
  4. Select or clear the role and scope pairs for the service, as needed. Be sure to enable only entries that contain the unique scope that was created for the customer.
  5. Click Save.

Access and configure workspaces

Each tenant gets their own workspace with a unique customer.cloud.com URL. This URL is where the customer’s users access their published apps and desktops.

  • From Citrix Managed Desktops: On the Manage dashboard, view the URL by expanding User Access & Authentication on the right
  • From Citrix Cloud: From the Customer dashboard, select Workspace Configuration from the upper left menu. View the URL on the Access tab.

You can change access and authentication to a workspace. You can also customize the workspace appearance and preferences. For details, see the following articles:

Monitor a customer’s service

The Citrix Managed Desktops Monitor dashboard in a CSP environment is essentially the same as a non-CSP environment. See Monitor for details.

By default, the Monitor dashboard displays information about all customers. To display information about one customer, use Select Customer.

Keep in mind that the ability to see Monitor displays for a customer is controlled by the administrator’s configured access.