End user experience

Accessing web and SaaS applications with Chrome Enterprise Premium

You can access published internal web applications and external SaaS applications using Chrome Enterprise Premium in four different ways. Choose the option that applies to your environment.

  • Open the Chrome browser.

  • Add a new Chrome profile using your company’s credentials (that is, create a managed Chrome profile).

    New chrome profile

  • After the profile is created, two extensions are automatically installed:

    • Citrix Secure Access

    • Secure Enterprise Browser

    Extensions installed

  • Access internal and external applications by entering the URL in the address bar or by navigating to the published sites.

  • Behavior when the URL is entered manually:

    • Internal web app (allowed):

      The request is securely tunneled through Secure Private Access and the site loads.

      Internal web app access

    • Internal web app (denied):

      Secure Private Access blocks the request, and an Access Restricted page appears.

      Denied internal web app access

    • External SaaS app (allowed):

      The request is allowed directly without tunneling.

    • External SaaS app (denied):

      Secure Private Access blocks the request, and an Access Restricted page appears.

Option 2: Managed Chrome profile already exists — access through StoreFront (Citrix Workspace Web UI)

  • Ensure the managed Chrome profile with company credentials already exists.

  • Launch Chrome with the correct company-managed profile.

  • Open the StoreFront™ store from the Citrix Workspace™ Web UI (RFWeb).

  • Log in to the store.

  • Go to the Apps tab and select the web/saas app published by your company’s admin.

    Published apps

  • The web/saas app launches seamlessly in a new tab within the same managed Chrome profile.

    App launch

  • Allow and deny logic remains the same as Option 1.

Option 3: Access StoreFront (Citrix Workspace Web UI) from a non-managed Chrome profile or a non-Chrome browser (Edge, Firefox)

  • Launch Edge, Firefox, or a non-managed Chrome profile.

  • Open the StoreFront store from the Citrix Workspace™ Web UI (RFWeb).

  • Log in to the store.

  • Go to the Apps tab and select the published web app.

  • A popup appears with a dialog showing the button Open Citrix Workspace. Click this button to proceed.

    Workspace popup

  • After clicking the button, one of the following happens:

    • Managed Chrome profile already exists: The app launches directly in the managed profile.

      Existing Chrome profile

    • Managed Chrome profile does not exist: You are prompted to create a managed Chrome profile before the app launches.

      Create a Chrome profile

  • Allow and deny logic remains the same as Option 1.

Option 4: Access apps through the Citrix Workspace app

  • Open the StoreFront store using the Citrix Workspace app.

  • Log in to the store.

  • Go to the Apps tab and select the published web app.

  • The Workspace app launches Chrome automatically. Based on your setup:

    • Managed Chrome profile exists: The app opens directly in the managed profile.

      Existing Chrome profile

    • Managed Chrome profile does not exist: You are prompted to create one before the app opens.

      Create a Chrome profile

  • Allow and deny logic remains the same as Option 1.

Accessing client/server (TCP/UDP) applications

If RDP is configured, end users must perform the following steps to access the TCP/UDP app:

  1. Log in to the Citrix Secure Access client.

  2. After the secure access session is established, start a remote desktop connection.

    Secure Access connected

    RDP connected

    1. Press the Windows key, type Remote Desktop Connection, and press Enter.

    2. Enter the IP address or host name of the computer that you are trying to connect to.

    3. Click Connect. You might be prompted to enter the credentials.

    4. Enter the user name and password for the remote computer and then click OK.

A remote desktop connection is established now and the end user can interact with the remote computer.