NetScaler SDX

Cascading External Authentication Servers

June 21, 2024

Contributed by:

C S C

Cascading multiple external authentication servers provides a continuous, reliable process for authenticating and authorizing external users. If authentication fails on the first authentication server, the NetScaler SDX Management Service attempts to authenticate the user by using the second external authentication server, and so on.

To enable cascading authentication, you need to add the external authentication servers to the Management Service. For more information, see Configuring External Authentication. You can add any type of the supported external authentication servers (RADIUS, LDAP, and TACACS). For example, if you want to add four external authentication servers for cascading authentication, you can add two RADIUS servers, one LDAP server, and one TACACS server, or four servers of the same type. You can configure up to 32 external authentication servers in Citrix Application Delivery Management.

Note:

Cascading external authentication servers through CLI are not supported.

To cascade external authentication servers:

On the Configuration tab, under System, expand Authentication.
In the Authentication page, click Authentication Configuration.
In the Authentication Configuration page, select EXTERNAL from the Server Type drop-down list (you can cascade only external servers).
Click Insert, and on the External Servers page that opens, select one or multiple authentication servers that you would like to cascade.
Click OK.

The selected servers are displayed on the Authentication Servers page as shown in the figure below. You can specify the order of authentication by using the icon next to a server name to move the server up or down in the list.

AutheticationConfiguration page

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Cascading External Authentication Servers

June 21, 2024

Contributed by:

C S C

June 21, 2024

Contributed by:

C S C

Cascading External Authentication Servers

In this article