Microsoft Archive – Page 5 of 7

Citrix ADC as AD FS Proxy

This article is about creating an AD FS Proxy from Citrix ADC (version 12). The AD FS Proxy is used to authenticate e.g. external SaaS applications or websites via AD FS. The following should be achieved by the AD FS Proxy:

URL / DoS Protection
Suitable external authentication (MFA, Forms instead of Kerberos)
Account Lockout Protection
Availability (Load Balancing)

What is AD FS ?

Active Directory Federation Services (AD FS) is a feature in the Windows Server operating system that allows identity information to be shared outside of the corporate network. Users can access applications (e.g. Office365, Salesforce.com, etc.) without being prompted to provide credentials again. These applications can be hosted locally, in the cloud, or even by other companies. The user accounts can be managed by the administrator in a single location, the Active Directory.

A normal deployment of AD FS for external clients consists of AD FS Proxy and AD FS Server. The AD FS Server is a member of the domain and perform the authentication. The AD FS Proxy is usually located in a separate network zone (DMZ) so that it can be reached externally and forward the requests inwards.

Citrix ADC as initial IdP for Office365

This article is about setting up SAML authentication for Office365 through the Citrix ADC (version 12). The Citrix ADC serves as IdP and Office365 as SP. So that you do not have to enter your user name a hundred times, this is prevented by an initial IdP (SSO).

Terminology

In short, the important upcoming terms explained.

SAML

SAML (Security Assertion Markup Language) provides a common platform for web-based access to multiple, autonomous services without the need to reenter multiple credentials. Authentication takes place via an encrypted session cookie, transparent in the background. This session cookie, which is provided with an expiration date, is given to the user in the browser by an authentication service (Identity Provider – IdP) and can then subsequently use all connected services (Service Provider – SP) in the browser.

WEM Administration Console Version 1906 – Part 4 (Administration & Monitoring)

Update of the article to the Workspace Environment Management Version 1906.

In the fourth (and last) part of the series about the WEM Administration Console, I give you an insight into the menu items Administration & Monitoring.

Administration

These settings control administrative functions such as delegation, user statistics, and change logging.

Workspace Environment Management Version 1811 is out now

The new Current Release of WEM is out now. It does not include many new features, but a lot of bug fixes.

What’s new

A Profile Management health status column is provided on the Administration > Agents > Statistics tab. As of this release, Workspace Environment Management supports performing automated status checks on your agent hosts to determine whether Profile Management is configured optimally. You can view the status in the column.

WEM Administration Console Version 1906 – Part 3 (Active Directory Objects, Transformer Settings and Advanced Settings)

Update of the article to the Workspace Environment Management Version 1906.

In the third part of the series about the WEM Administration Console, I give you an insight into the menu items Active Directory Objects, Transformer Settings and Advanced Settings.

Active Directory Objects

You use this Menu Item to specify the users, computers, groups and organizational units managed by Workspace Environment Management.