Contextual policies and multi-factor authentication for zero-trust deployment, now available with Citrix Workspace

Citrix is committed to providing the best user experience with best-in-class security within Citrix Workspace. That’s why we’re excited to announce general availability within the Citrix Workspace UI that enables integration with an on-premises Citrix Gateway to expand third-party identity-provider integration.

What Does This Mean for You?

Today, Citrix Gateway supports a wide variety of identity integration, all of which can now be leveraged for authentication to Citrix Workspace. With an on-premises Citrix Gateway, admins can enable authentication via:

  • RADIUS authentication
  • Smart-Card Authentication
  • Integrated Windows Authentication (Pass-through Auth)
  • Conditional access policies
  • Passwordless authentication

Expanding the Universe

Admins can now architect an expanded set of identity solutions with Citrix Workspace. Citrix Workspace will automatically federate to the customer’s Citrix Gateway during logon (Workspace-> Gateway login -> Workspace).

One important use-case now available in Citrix Workspace through the Citrix Gateway is the ability to leverage on-premises RADIUS and other third-party MFA providers such as Symantec, RSA, DUO, and Yubico. In addition to multi-factor authentication, you can also extend the nFactor policy framework that your on-premises Citrix Gateway provides to implement a zero-trust model for enforcing your contextual access control policies. For example, you can authenticate your on-premises users with a username/password and challenge your remote users with a second-factor authentication.

An Improved End-User Experience

Below is an example of what the new end-user experience is like:

Who Should Use This Feature?

If you’re an existing customer using StoreFront on-premises with an on-premises Citrix Gateway and are looking to move to Citrix Workspace in the cloud, this feature is for you.

If you are an existing Citrix Workspace or Citrix Virtual Apps and Desktops service customer and have an on-premises Citrix Gateway or Citrix ADC, you should also considering leveraging this new capability.

If you don’t have an on-premises Citrix Gateway or Citrix ADC, you can get your free trial here.

There are no additional licensing requirements outside of Citrix Workspace or any other Citrix service you use today. To begin using this feature, just log in to your Citrix Cloud account and navigate to the Identity and Access Management section using the hamburger menu in the top left corner of the page, then select Citrix Gateway. Follow the steps listed in your in-product guide.

Note: This post was updated on September 18, 2019, to reflect this capability moving from Tech Preview to General Availability.