Gateway

Authentication and Authorization

January 8, 2024

Contributed by:

Citrix Gateway employs a flexible authentication design that permits extensive customization of user authentication for Citrix Gateway. You can use industry-standard authentication servers and configure Citrix Gateway to authenticate users with the servers. Citrix Gateway also supports authentication based on attributes present in a client certificate. Citrix Gateway authentication is designed to accommodate simple authentication procedures that use a single source for user authentication, and more complex, cascaded authentication procedures that rely upon multiple authentication types.

Citrix Gateway authentication incorporates local authentication for the creation of local users and groups. This design centers around the use of policies to control the authentication procedures that you configure. The policies you create can be applied at Citrix Gateway global or virtual server levels and can be used to set authentication server parameters conditionally based on the user’s source network.

Because policies are bound either globally or to a virtual server, you can also assign priorities to your policies to create a cascade of multiple authentication servers as part of authentication.

Citrix Gateway includes support for the following authentication types.

Local
Lightweight Directory Access Protocol (LDAP)
RADIUS
SAML
TACACS+
Client certificate authentication (including smart card authentication)

Citrix Gateway also supports RSA SecurID, Gemalto Protiva, and SafeWord. You use a RADIUS server to configure these types of authentication.

While authentication allows users to log on to Citrix Gateway and connect to the internal network, authorization defines the resources within the secure network to which users have access. You configure authorization with LDAP and RADIUS policies.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Authentication and Authorization

January 8, 2024

Contributed by:

January 8, 2024

Contributed by:

Authentication and Authorization

In this article