DIGIPASS SSO Authentication for CITRIX SmartAccess end ... - Vasco

More documents

Recommendations

Info

Figure 2: Solution TCP 1812 7 DIGIPASS SSO Authentication to Citrix XenDesktop in High Security Environments TCP ??? Get Credentials Get USR TCP 80/443 TCP 445 NTLM
6 Technical Concept 6.1 General overview The main goal of Citrix CAG is to perform authentication in a secure way to set up a secure SSL VPN connection and retrieve a single sign on to connect to the Web Interface. The use of DIGIPASS , and DIGIPASS solely , makes the setup unique and is very different from the standard 2FA integrations. We describe the setup in separate chapters , describing the setup for each zone. The first zone, DMZ, will be authenticated by using RADIUS. The second zone containing the Citrix Netscaler forwards the credentials which use the Citrix standard configuration. The third zone, LAN, will use a DIGIPASS Pack for Citrix with enhanced functionality interacting with IIS running on the Citrix Web Interface. 6.2 Citrix prerequisites Make sure you have an operational setup of the Citrix SmartAccess configuration using a static password(LDAP, eDir, AD,..). It is very important this is working correctly before you start implementing the VASCO part. Current configuration: • Windows/ Windows 2008R2 • Citrix CAG 9.1 • Citrix Netscaler 9.1 • Citrix XenApp 6.0 • Citrix Web Interface 5.3 All support updates for future versions will be available in the DIGIPASS Authentication for Web Interface , downloadable from www.vasco.com 6.3 IDENTIFIER prerequisites We assume, you already installed IDENTIFIER , a test user has been created , a domain has been created, LDAP sync has been configured, DIGIPASS is imported and tested locally within the web administration. Make sure you can synchronize the LDAP users from AD or any other repository. Check the manuals for configuring the LDAP synchronization in IDENTIFIER. The quick start guide of IDENTIFIER helps you to configure these basic features. Throughout this document, we will specify the differences between the IDENTIFIER in the DMZ zone and the IDENTIFIER in the LAN environment. 8 DIGIPASS SSO Authentication to Citrix XenDesktop in High Security Environments
Page 1 and 2: DIGIPASS Authentication to Citrix X
Page 3 and 4: Table of Contents Disclaimer ......
Page 5 and 6: 1 Abstract SmartAccess allows to co
Page 7: End Point Scenario’s Publiek Netw
Page 11 and 12: 7.2 Web Interface configuration Wit
Page 13 and 14: In the Policy tab, click the Edit b
Page 15 and 16: 8.3 LDAP Synchronization Configure
Page 17 and 18: In the Policy tab, click the Edit b
Page 19 and 20: 10 DIGIPASS Authentication for IIS
Page 21: 12 DIGIPASS and User Management 12.

DIGIPASS SSO Authentication for CITRIX SmartAccess end ... - Vasco

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?