Microsoft Azure MFA Server in Citrix ADC Version 12

Update:

As of July 1, 2019, Microsoft will no longer offer MFA Server for new deployments. New customers who would like to require multi-factor authentication from their users should use cloud-based Azure Multi-Factor Authentication. Existing customers who have activated MFA Server prior to July 1 will be able to download the latest version, future updates and generate activation credentials as usual.

https://www.microsoft.com/en-us/download/details.aspx?id=55849

During one of my current projects, I launched a PoC for two-factor authentication based on Microsoft Azure MFA. Azure multi-factor authentication requires users to verify and confirm their signups using a mobile app, phone call, or text message. You can use it with Azure AD or the local AD.

It is important that all my information has the status of March 2019 and because it is the cloud, quite quickly become obsolete again.

Microsoft Azure MFA Server in Citrix ADC Version 12

Multi-Factor Authentication

The safety of the two-stage check is at level approach. The multiple authentication factors poses a major challenge for attackers. Even if an attacker can find out the user’s password, this is useless unless he or she is also proficient in the additional authentication method. This works by requesting at least two of the following authentication methods:

  • Something you know (usually a password)
  • Something you have (a familiar device that can not be easily duplicated, like a phone)
  • Something that you are (biometrically)
Continue reading “Microsoft Azure MFA Server in Citrix ADC Version 12”

Citrix ADC Version 12 as initial IdP for Office365

This article is about setting up SAML authentication for Office365 through the Citrix ADC (version 12). The Citrix ADC serves as IdP and Office365 as SP. So that you do not have to enter your user name a hundred times, this is prevented by an initial IdP (SSO).

Terminology

In short, the important upcoming terms explained.

SAML

SAML (Security Assertion Markup Language) provides a common platform for web-based access to multiple, autonomous services without the need to reenter multiple credentials. Authentication takes place via an encrypted session cookie, transparent in the background. This session cookie, which is provided with an expiration date, is given to the user in the browser by an authentication service (Identity Provider – IdP) and can then subsequently use all connected services (Service Provider – SP) in the browser.

Continue reading “Citrix ADC Version 12 as initial IdP for Office365”

WEM Administration Console – Part 4 (Administration & Monitoring)

Update of the article to the Workspace Environment Management Version 1906.

Citrix Workspace Environment Management Console 1906

In the fourth (and last) part of the series about the WEM Administration Console, I give you an insight into the menu items Administration & Monitoring.

Administration

These settings control administrative functions such as delegation, user statistics, and change logging.

WEM Administration Console - Part 4 (Administration & Monitoring)
Continue reading “WEM Administration Console – Part 4 (Administration & Monitoring)”

Workspace Environment Management Version 1811 is out now

The new Current Release of WEM is out now. It does not include many new features, but a lot of bug fixes.

What’s new

A Profile Management health status column is provided on the Administration > Agents > Statistics tab. As of this release, Workspace Environment Management supports performing automated status checks on your agent hosts to determine whether Profile Management is configured optimally. You can view the status in the column.

Continue reading “Workspace Environment Management Version 1811 is out now”