Configure LDAP Authentication as a Second Factor
Use the procedures in the following Citrix NetScaler Article to set up Active Directory LDAP Authentication on the NetScaler Gateway.
http://support.citrix.com/article/CTX108876.
Note: When setting up LDAP authentication, use UPN as server logon name attribute.