Product Documentation

Providing access to virtual apps and desktops

Feb 14, 2017

Citrix Receiver requires configuration of either Web Interface or StoreFront to deliver apps and desktops from your XenApp or XenDesktop deployment.

Web Interface

There are two types of Web Interface sites: XenApp Services (formerly Program Neighborhood Services) sites and XenApp websites. Web Interface sites enable user devices to connect to the server farm.


You can configure StoreFront to provide authentication and resource delivery services for Citrix Receiver, enabling you to create centralized enterprise stores to deliver desktops and applications through XenApp and XenDesktop, and Worx Mobile Apps and mobile apps you've prepared for your organization through XenMobile.

Authentication between Citrix Receiver and a Web Interface site or a StoreFront store can be handled using a variety of solutions:

  • Users inside your firewall can connect directly to Web Interface or StoreFront.
  • Users outside your firewall can connect to StoreFront or the Web Interface through NetScaler Gateway.
  • Users outside your firewall can connect through NetScaler Gateway to StoreFront.

In this article:

Connecting through NetScaler Gateway

Connecting to StoreFront

Connecting to Web Interface

Connecting through NetScaler Gateway

NetScaler Gateway 10 and 11 are supported by Citrix Receiver for Android for access to:

  • Web Interface 5.4 XenApp Services Sites and XenApp Web Sites
  • StoreFront 2.6, 3.0, 3.5, 3.6, 3.7 and 3.8 stores

Both single-source and double-source authentication are supported on Web Interface sites and StoreFront.

You can create multiple session policies on the same virtual server depending on the type of connection (such as ICA, CVPN, or VPN) and type of Receiver (Web Receiver or locally installed Citrix Receiver). All of the policies can be achieved from a single virtual server.

When users create accounts on Citrix Receiver, they should enter the account credentials, such as their email address or the matching FQDN of your NetScaler Gateway server. For example, if the connection fails when using the default path, users should enter the full path to the NetScaler Gateway server.

To connect to XenMobile:

To enable remote users to connect through NetScaler Gateway to your XenMobile deployment, you can configure NetScaler Gateway to work with AppController or StoreFront (both components of XenMobile). The method for enabling access depends on the edition of XenMobile in your deployment:

Enabling access to XenMobile 9:

Client Certificate Authentication

Enabling access to XenMobile 10:

NetScaler Gateway and XenMobile

If you deploy XenMobile in your network, allow connections from remote users to AppController by integrating XenMobile and AppController. This deployment allows users to connect to AppController to obtain their web, Software as a Service (SaaS), and mobile apps, and access documents from ShareFile. Users connect through either Citrix Receiver or the NetScaler Gateway Plug-in.

If you deploy XenMobile in your network, allow connections from internal or remote users to StoreFront through NetScaler Gateway by integrating NetScaler and StoreFront. This deployment allows users to connect to StoreFront to access published applications from XenApp and virtual desktops from XenDesktop. Users connect through Citrix Receiver.

To deploy windows and custom apps to your users, you must wrap the apps by using the MDX Toolkit. You can find more information here:

MDX Toolkit

Connecting to StoreFront

Citrix Receiver for Android supports launching sessions from Receiver for Web, provided that the web browser works with Receiver for Web. If launches do not occur, please configure your account through Receiver for Android directly.


When Citrix Receiver for Web is used from a browser, sessions are not launched automatically when downloading an .ICA file. The .ICA file must be opened manually shortly after its downloaded for the session to be launched. 

With StoreFront, the stores you create consist of services that provide authentication and resource delivery infrastructure for Citrix Receiver. Create stores that enumerate and aggregate desktops and applications from XenDesktop sites and XenApp farms, making these resources available to users.

For administrators who need more control, Citrix provides a template you can use to create a download site for Receiver for Android.

Configure stores for StoreFront just as you would for other XenApp and XenDesktop applications. No special configuration is needed for mobile devices. For mobile devices, use either of these methods:

Provisioning files. You can provide users with provisioning files (.cr) containing connection details for their stores. After installation, users open the file on the device to configure Citrix Receiver automatically. By default, Receiver for Web sites offer users a provisioning file for the single store for which the site is configured. Alternatively, you can use the Citrix StoreFront management console to generate provisioning files for single or multiple stores that you can manually distribute to your users.

Manual configuration. You can directly inform users of the NetScaler Gateway or store URLs needed to access their desktops and applications. For connections through NetScaler Gateway, users also need to know the product edition and required authentication method. After installation, users enter these details into Citrix Receiver, which attempts to verify the connection and, if successful, prompts users to log on.

To configure Citrix Receiver to access apps:

When creating a new account, in the Address field, enter the matching URL of your store, such as

Continue by completing the remaining fields and select the NetScaler Gateway authentication method, such as enabling the security token, selecting the type of authentication, and saving the settings.

When adding an account using an automatic configuration you can enter the FQDN of a StoreFront server or NetScaler, or you can alternatively use an email address to create a new account. You are then prompted to enter the user credentials before logging on.

More information:

For more information about configuring access to StoreFront through NetScaler Gateway, see:

Managing Access to StoreFront Through NetScaler Gateway

Integrating StoreFront with NetScaler Gateway

Connecting to Web Interface

Citrix Receiver can launch applications through your Web Interface site. Configure the Web Interface site just as you would for other XenApp and XenDesktop apps and desktops. No special configuration is needed for mobile devices.

Citrix Receiver supports Web Interface version 5.4 only. In addition, users can launch applications from Web Interface 5.4 using the Firefox mobile browser.

To launch applications on the Android device:

From the device, users log into the Web Interface site using their normal logon and password.

For more information about configuring Web Interface sites see:

Configuring Web Interface