NetScaler Gateway Prerequisites

• NetScaler Gateway is configured as a proxy to StoreFront. See https://support.citrix.com/article/CTX139963

• Configure StoreFront to accept NetScaler Gateway as a proxy. Seehttps://docs.citrix.com/en-us/storefront/1912-ltsr/integrate-with-citrix-gateway-and-citrix-adc/configure-citrix-gateway.html

• NetScaler Gateway server SSL certificate is trusted by Storefront. Note:The certificate key must be at least 2048 bits and the certificate CN (common name) must match the DNS name of the NetScaler Gateway server. See https://docs.citrix.com/en-us/citrix-endpoint-management/advanced-concepts/deployment/integrating-with-citrix-gateway-and-citrix-adc.html

• Configure StoreFront to enumerate resources from XenApp and XenDesktop.

Tasks:

• Configure LDAP Authentication as a second factor on NetScaler.

• Change the VeridiumID RADIUS default secret

• Configure RADIUS as a primary factor and choose Password Authentication Protocol (PAP) on NetScaler.

• Configure authentication methods on StoreFront.

• Test remote access to Citrix desktops or applications