AuthX Integrations

AuthX – Citrix Integration

Posted authxwp

AuthX integrates with your on-premises Citrix Xenapp using Citrix FastConnect to add two-factor authentication and auto launch the Citrix applications during Windows logins.

System Requirements

AuthX Authentication for Windows Logon supports both client and server operating systems.

Clients:

  • Windows 10 & above.

Servers:

  • Citrix Xenapp Server 10.15 & above.

AuthX Factor Support

AuthX for Citrix FastConnect support these factor types for 2FA:

  • RFID

Steps to Protect an Application

Before moving on to the deployment process, it’s a good idea to familiarize yourself with AuthX portal concept and features like Managing Applications, Enrolling AuthX users and AuthX policy settings.

Manage Applications

  1. Sign up for an AuthX account.

  2. Navigate to Applications tab.

  3. Click Protect an application and select Protect for Windows.

  4. Provide your inputs on the Application Name, Description, Policies & Groups

    1. For the Advanced configuration

      1. Select Allow roaming profile for biometrics

      2. In the Advanced configuration, add this code.

        {"companyConfiguration":{"region":"","timezone":"Eastern Standard Time","companyLogo":"","companyIcon":"","companyAuthfactors":{"mobileOptions":{"isPalmPush":true,"isFacePush":true,"isPush":true,"isTotp":true,"isSMS":true,"isCall":true},"nativeOptions":{"isFace":true,"isFinger":true,"isRfid":true,"isPalm":true,"isPassword":true,"isHardwareToken":true,"isSoftwareToken":true}}},"biometricConfiguration":{"finger":{"delay":2,"DeviceType":"6","MatchScore":3000,"SpoofScore":500,"QualityScore":40,"RetryCount":2,"TemplateType":"1","TimeOut":"20"},"face":{"Sharpness":{"min":0,"max":10000,"IsConfigured":false},"Brightness":{"min":-7000,"max":5000,"IsConfigured":false},"Contrast":{"min":-5000,"max":5000,"IsConfigured":false},"UniqueIntensityLevels":{"min":0,"max":10000,"IsConfigured":false},"Shadow":{"min":-700,"max":10000,"IsConfigured":false},"NoseShadow":{"min":-80,"max":10000,"IsConfigured":false},"Specularity":{"min":-700,"max":10000,"IsConfigured":false},"EyeGaze":{"min":-400,"max":10000,"IsConfigured":false},"EyeStatusR":{"min":-400,"max":10000,"IsConfigured":false},"EyeStatusL":{"min":-400,"max":10000,"IsConfigured":false},"GlassStatus":{"min":-8000,"max":5000,"IsConfigured":false},"HeavyFrame":{"min":-10000,"max":300,"IsConfigured":false},"MouthStatus":{"min":0,"max":10000,"IsConfigured":false},"BackgroundUniformity":{"min":-5000,"max":10000,"IsConfigured":false},"RedEyeR":{"min":-10000,"max":0,"IsConfigured":false},"RedEyeL":{"min":-10000,"max":0,"IsConfigured":false},"Roll":{"min":-5000,"max":5000,"IsConfigured":false},"Yaw":{"min":-5500,"max":5500,"IsConfigured":false},"Pitch":{"min":-5500,"max":10000,"IsConfigured":false},"EyeDistance":{"min":50,"max":250,"IsConfigured":false},"FaceConfidence":{"min":600,"max":10000,"IsConfigured":true},"FaceVerificationConfidence":{"min":9000,"max":10000,"IsConfigured":false},"faceErrors":{"Sharpness":null,"MaxBrightness":null,"MinBrightness":null,"MaxContrast":null,"MinContrast":null,"Shadow":null,"NoseShadow":null,"Specularity":null,"EywGaze":null,"EyeStatusR":null,"EyeStatusL":null,"GlassStatus":null,"HeavyFrame":null,"MouthStatus":null,"BackgroundUniformity":null,"RedEyeR":null,"RedEyeL":null,"Roll":null,"Yaw":null,"Pitch":null,"MaxEyeDistance":null,"MinEyeDistance":null,"FaceConfidence":null,"FaceVerificationConfidence":null},"MatchScore":75,"CompanyId":null},"palm":null},"applicationConfiguration":{"applicationName":"WindowsLogon","applicationType":"2","advancedConfiguration":[{"login_options_tile_view":"0","user_self_support":false,"username_display_on_screen":true,"password_authentication":2,"password_authentication_expiry":12,"default_auth_code":"Password","exclude_user_group":null,"login_as":"","work_group":null,"user_group":null,"rfid_only":false,"tap_to_logoff":false,"logoff_action":"","Application_start":[],"inactivity_period":86400,"session_end_action":1,"kill_app_process":false,"kill_background_process":false,"kill_application_exclude":[],"kill_application_explicit":[],"help_desk_information":"","authenticate_user_for_enrollment":true}]},"applicationPolicy":{"policyName":"Default Global Policy","adDomain":"","emailDomain":"","ip":null,"policyAuthfactors":{"isface":true,"isPalmPush":true,"isPalm":true,"isFacePush":true,"isPush":true,"istotp":true,"issms":true,"isCall":true,"isFinger":true,"isRfid":true,"isPassword":true,"isHardwareToken":true,"isSoftwareToken":true,"isBle":false}},"authSystemConfig":{"Status":1,"MachineName":"JANA-LAP","IsAutoLogon":false,"PcIdentifier":"8eac3e00e230c8cc973f3febd15cd9dc4f40d35dc14d6b6d3d1fb2cb879e1758"},"message":null,"code":1,"isActive":false,"dateTime":"2020-07-13T14:06:23.4252338Z","version":0}

      3.  

         

  5. Save the application. 

Enroll a user

Add your first user to AuthX, either manually or using Directory sync. The username should match your Windows logon name. Install AuthX mobile app and add your account to it so you can use AuthX Push. If the user logging in Windows which does not exist in AuthX, the user may not be able to log in.

Policy Management

  1. Utilize the available default policy or create your own policy to restrict on the following

    1. Authentication

    2. Browsers – Desktop & Mobile

    3. Operating System

    4. IP address

Citrix Receiver Configuration

  1. If required, please make sure to connect VPN

  2. Download and install Citrix Receiver https://www.citrix.com/en-in/downloads/citrix-receiver/windows/receiver-for-windows-latest.html

  3. Select Add Account.

  4. Add your Citrix server details here

  5. Enter your Windows logon details on the Citrix Receiver

    1. Username – Windows logon name with domain

    2. Password – Windows logon password

  6. On successful login, Citrix Receiver will be launched.

  7. Select anyone of the application from above & it will open up.

Enable Citrix application

  1. Download and Install AuthX Windows agent from here

  2. Go to Local Disc C folder

  3. Select Program Files

  4. Select AuthX and select AuthX Windows Agent

  5. Select CitrixConfigUtil folder, right click and select Run as Administrator

  6. Now the Citrix application config utility popup opens up.

  7. Select Enable Citrix Signle Sign-on and save it

  8. Now the Windows Console opens up

  9. After the policy is updated, the windows console popup closed automatically.

  10. Go to Citrix application config utility and input your details

    1. Username – Windows logon name

  11. Select Load and then select New

  12. In the Application details, input your values

    1. ID: 1 (Any number)

    2. Name: To mention the name of the application listed in the Citrix Receiver

    3. If you want the application to launch automatically after logon, you can select Auto-Start

    4. Select Save which is next to Auto- start.

    5. Select Assign

  13. Now the above selected application will be assigned to Windows Logon user

Internet Explorer Configuration

  1. Open the IE browser

  2. Select Tools

  3. Select Internet options and navigate to Security tab

    1. Select Local Intranet

    2. Select Sites

      1. Select Advanced

      2. Add the Citrix website https://az-east-citrix.certify.org in Add this website to the zone and click Add button

      3. Select Close

      4. Select OK & close the popup

Verifying Citrix Configuration

  1. Restart your system

  2. Go to System Tray and right click on the Citrix Receiver icon

  3. Select Advanced Preferences

  4. Select Configuration Checker

  5. Enable SSON Checker & select Run

  6. Now you can see the results

Enroll RFID in AuthX Windows Agent

  1. Go to System tray

  2. Right click on the AuthX Windows Agent and select User Configuration

  3. Make sure that your Profile details are in Sync

  4. Select Authentication to enroll your RFID

    1. Connect your RFID reader & then select Enroll

    2. Place your RFID card in the reader

    3. Authentication successful

Test Citrix application auto launch

  1. Now lock you system.

  2. Try to unlock using enrolled RFID card.

  3. After successful logon, the selected application will be launched automatically.

Network Diagram