StoreFront

Last published : Oct 19, 2026
To display Secure Private Access web applications in your on-premises Citrix Store, you must configure the Secure Private Access service as a new Delivery Controller on StoreFront.
Follow this procedure, especially if you are integrating with an existing Citrix DaaS environment (as it allows you to use your existing StoreFront).
  1. On the StoreFront server, open the StoreFront admin console.
  2. Navigate to the section for managing Delivery Controllers (for example, select Store and click Manage sites).
  3. Click Add to create a new controller.
  4. When prompted for the controller type, select the Secure Private Access option.
  5. In the Server field, enter the FQDN of your Secure Private Access load balancer.
  6. Select Transport type HTTPS and Port 443.
  7. Save your changes.

Configuring a new Store

If the Store doesn’t already exist, install the supported version of StoreFront, and then follow the Create Store wizard. Ensure that the Store is configured with:
  • Remote access: Remote access configuration requires NetScaler Gateway virtual server address that is used to enumerate web/SaaS applications published in Secure Private Access.
  • Authentication methods: Ensure Pass-through from Citrix Gateway is enabled.
For details, see Create store.