Authentication
Authentication methods
Normally users either authenticate directly to StoreFront™, or to a Citrix Gateway in front of StoreFront. Depending on your requirements, there are several authentication methods available.
| Method | Detail |
|---|---|
| User name and password | Users enter their Active Directory username and password. |
| Domain pass-through | Windows devices single sign-on using the account they used to log in to Windows. |
| Smart card | Users swipe a smart card and enter a PIN. This uses the certificate stored on the smart card to authenticate the user. |
| SAML | Delegate authentication to third party identity providers using SAML. |
| HTTP Basic | Allows third party integrations to authenticate users using their Active Directory username and password. See the Post Credentials API in the Web API developer documentation. HTTP Basic does not provide a user interface for users to authenticate. |
| Pass-through from Citrix Gateway | Allow users to authenticate at a Citrix Gateway. |
To select and configure which methods users can use to log into StoreFront through Citrix Workspace app, see Configure authentication. To select which methods users can use to log in using a web browser, see Configure Authentication for website.
Alternatively, when creating a new store, you can disable authentication and instead allow anonymous access to the stores. See Create store.
Single sign-on to VDAs
Some authentication methods include the ability to SSO to VDAs, see each individual authentication method for more details. Otherwise single sign-on can be achieved using Federated Authentication Service.
Authentication method customizations
You can customize existing methods or create your own authentication methods using the Authentication SDK.