Bidirectional content redirection
Bidirectional content redirection allows HTTP or HTTPS URLs in web browsers, or embedded into applications, to be forwarded between the Citrix VDA session and the client endpoint in both directions. This means:
- A URL entered in a browser running in the Citrix session can be opened using the client’s default browser (Host-to-Client).
- Conversely, a URL entered in a browser running on the client can be opened in a Citrix session, either with a published application or desktop (Client-to-Host).
Citrix also offers host-to-client redirection and Local App Access redirection. However, it is recommended to use Bidirectional Content Redirection for most use cases.
System requirements
- Citrix Virtual Apps and Desktops™ version 2402 or later.
- Citrix Workspace™ app for Mac 2603 or later.
- Browsers: Google Chrome or Microsoft Edge must be installed on both Client and VDA.
- Browser Extension: Browser Redirection Extension on both Client and VDA side browsers.
- Chrome Extension Browser Redirection Extension- Chrome Web Store
- Edge Extension Browser Redirection Extension - Microsoft Edge Addons
Note:
To enable Bidirectional Content Redirection, ensure that you have Virtual Delivery Agent (VDA) version 2503 if you intend to use the Browser redirection extension from the Microsoft Edge Add-ons store. For older VDA versions, you can achieve the same functionality by installing the extension from the Chrome Web Store within your Microsoft Edge browser.
Configuration
Starting with modern versions of Citrix Virtual Apps and Desktops, Bidirectional Content Redirection is configured primarily through Citrix Web Studio.
Server-Side:
For server-side configuration, refer to Bidirectional content redirection.
Client-Side:
- Browser Extension: The Citrix Browser Redirection Extension must be installed and enabled on the local Mac browser (Google Chrome or Microsoft Edge).
- On macOS, no additional Group Policy configuration is required. The policy settings are pushed from the VDA upon session connection.
For detailed instructions, see the Bidirectional content redirection documentation for Citrix Virtual Apps and Desktops.
OAuth redirection support for Bidirectional content redirection
Starting with Citrix Workspace app for Mac 2607, bidirectional content redirection supports OAuth authentication flows. When a user opens an OAuth-protected URL from a VDA session, the bidirectional content redirection policy intercepts the URL and redirects the authentication request to the local Mac endpoint. The user provides credentials on the Mac. After successful authorization, the OAuth callback URL (containing the authorization code or token) is redirected back to the VDA to complete the flow.
For more information, see Bidirectional content redirection policy settings.
Limitations
-
OAuth Redirection: Due to macOS security requirements for notarized applications, custom OAuth callback URL schemes must be pre-registered with Citrix and cannot be changed dynamically post-installation. Only
citrix-oauth-rediris supported by default. Please reach out to the Citrix Product team to register your URL scheme.