How To: Configure Pass-Through Authentication with Web Interface 5.2

In this AskSupport How To video you will learn how to Configure Pass-Through Authentication with Web Interface 5.2

Tags: technical support web interface how to
Views: 9,961
Rating: 0

Transcript : Hi, in this Citrix support How To video, I will cover how to set up pass-through authentication with Web Interface 5.2. In order to use the pass-through authentication feature, Web Interface must be running on IES, and users must be running supported versions of Internet Explorer. For IES 7 running on Windows Server 2008, you must make sure that the Windows authentication role serve is enabled in IES. So, step one in this three-step process is to make sure that you have the appropriate plug-in installed. So, you must install the Citrix online plug-in or the Citrix XenDesktop viewer plug-in in your user’s device using an administrator account. So pass-through authentication is only available for these plug-ins, which are included on the installation media. For security reasons, the Citrix online plug-in web does not include this feature. So I already have the appropriate plug-in enabled and installed. So the next step is to enable the pass-through for clients. So, in order to do this, we need to add the client template for the group policy object editor. Once added, we can enable, actually enable the password authentication for the clients. So, let’s open up our object editor, the group policy object editor. So that’s…it’s an MMC snap-in. So let’s run the MMC. Let’s click Add/Remove Snap-in, and we’ll search for the group policy editor. So it should be down here. Here we go. Let’s add that. And let’s just expand it out there. There we go. Okay. So, in order to add it, we need to select Administration Templates. And, by the way, all these instructions are on the Knowledge Center or in the e-docs. So select templates. We go to the action menu. Add/Remove Templates. And we click Add. As you can see, the Citrix ICA client template doesn’t exist, so we need to click Add. And we search for it, and it’s usually located within the client device, so it’s Citrix, Program Files, ICA Client, Configuration, and there we go. So that’s the ICA client template. So let’s click Open, and we can see that that’s now added. And that’ll now be added to both the computer and the user configuration. Okay. So the next step is to enable the pass-through. So once we’ve added the template, we also need to enable the pass-through. So we come down to the Citrix Components, extend it all out to User authentication. Now, within here, we need to select Local user name and password. So, for now, it’s actually not configured, so we need to enable it. And, just by default, the Enable pass-through authentication is checked. Okay. So that’s done. And then we also need to repeat that within the user configuration. So, again, down to Citrix Components, online, user interaction, er, User authentication, Local user, and Enable the pass-through authentication. Okay? So that’s all that’s required to enable it for the clients. The last thing we need to do is enable it within the management console. So here’s the new console for 5.2. We need to select the site that we want to enable it on. So, I’m going to select the single site that I have here. We go to Authentication Methods. Okay. So as you can see here, we have it set up for Explicit. And just to show you what, the way we have it set up, so I’ll just, before I make any changes, I’ll browse to our web interface site and just log on, just to see that our explicit authentication is working. So our web site has opened, and let’s proceed to log in. And we can see our application is there. So that’s fine. So that’s explicit authentication configured. So now let’s go back and modify as we were planning to do. And we will check…uncheck Explicit. We only want to choose pass-through authentication. So, we’ll check that. And then to enable pass-through authentication, we just make sure that the check box, Use Kerberos authentication to connect to servers, is checked. So that’s the only setting there. So what should happen now is, is that when we launch the web site again, it should automatically log us in and present us with our application list. You can see the authentication taking place, and we have automatically launched in.

anonymous - great video, keep them coming!

yogesh12 - plz add the pass through conf. on xenapp 6.5 thanks. regards, Yogesh D.