Gateway

Additional Configuration Guidelines

January 8, 2024

Contributed by:

When you configure the Web Interface for single sign-on, use the following guidelines:

The Authentication Service URL must begin with https.
The server running the Web Interface must trust the Citrix Gateway certificate and be able to resolve the certificate fully qualified domain name (FQDN) to the virtual server IP address.
The Web Interface must be able to open a connection to the Citrix Gateway virtual server. Any Citrix Gateway virtual server can be used for this purpose. It does not have to be the virtual server to which users log on.
If there is a firewall between the Web Interface and Citrix Gateway, firewall rules can prevent user access, which disables single sign-on to the Web Interface. To work around this issue, either relax your firewall rules or create another virtual server on Citrix Gateway to which the Web Interface can connect. The virtual server must have an IP address that is in the internal network. When connecting to the Web Interface, use the secure port 443 as the destination port.
If you are using a certificate from a private Certificate Authority (CA) for the virtual server, in the Microsoft Management Console (MMC), use the certificates snap-in to install the CA root certificate in the local computer certificate store on the server running the Web Interface.
When users log on and receive an access denied error message, check the Web Interface event viewer for more information.
For successful user connections to published applications or desktops, the Secure Ticket Authority (STA) that you configured on Citrix Gateway must match the STA that you configured on the Web Interface.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Additional Configuration Guidelines

January 8, 2024

Contributed by:

January 8, 2024

Contributed by:

Additional Configuration Guidelines

In this article