Archive
SSO to StoreFront not working in CVPN mode – #Citrix, #NetScaler, #StoreFront
Single Sign-On from Access Gateway to StoreFront not working in CVPN mode
There is yet another “thing” to have in mind when setting up Access Gateway and StoreFront in CVPN mode!
It’s been an interesting day (or days/weeks/months I must admit) with some “issues” with a NetScaler ADC, Access Gateway with CVPN profiles and StoreFront 1.2. And one thing that we have been struggling with was Single Sign-On to StoreFront when we had the AG configured for CVPN access. And it was just this environment where I’ve seen this issue!!
After a lot of troubleshooting the Citrix guys came up with an explanation on why SSO from AG doesn’t work in this specific environment! And it’s not an obvious one to find I must say… but I now understand why it doesn’t work!
So let’s explain the design reason for why it doesn’t work (so bear with me, solution at the end!!)…
The following picture tries to give a VERY rough picture of how it could look like, clients on the Internet on the left, then a NetScaler ADC with the Access Gateway feature enabled and a vServer configured. This AG vServer has session policies and profiles for ICA proxy (old traditional ICA proxy policy) and the little newer CVPN mode. And YES; I’ve left out a lot of stuff like AD etc. to simplify this picture A LOT…
The overall idea and config is that AG authenticates the user and then shall do SSO to StoreFront. The CVPN policy have been created according to all best practices etc. (Citrix CloudGateway Express 2.0 – Implementation Guide).
But SSO still doesn’t work!! If you login through a browser when having the CVPN policy linked to the vServer you’ll see that authentication works perfectly but then when it tries to passthrough the authentication to StoreFront it fails.
This picture just shows the login to the NetScaler ADC Access Gateway vServer:
#Citrix Receiver for HTML5 Version 1.1 Released – #Receiver
Citrix Receiver for HTML5 Version 1.1 is released.. And it now has the support for all the Major Desktop Browsers.
Version 1.1 supports the latest updates of the following Desktop browsers
- Internet Explorer 10
- Safari 6
- Google Chrome
- Firefox
You can download this from https://www.citrix.com/content/citrix/en_us/downloads/citrix-receiver/receivers-by-platform/receiver-for-html5/
eDocs Location : http://support.citrix.com/proddocs/topic/receiver-html5-11/receiver-html5-version-wrapper.html
Key things to check out for while installing and configuring Citrix Receiver for HTML5 v1.1
Direct Internal Acces
- XenApp 6.5 server to be updated with FP1 and latest Hotfix
- Install the NEW Citrix Receiver for HTML5 Version 1.1 on your Storefront 1.2 server (Uninstall the old version manually before installing this new version)
- Open the installed “Citrix HTML5 HDX Engine Configuration” tool and Add the “Receiver for Web” URLs to configure for HTML5 access
- You can now open the supported browsers listed above on the client side and enter the “Receiver for Web” URL
- If you are prompted with the logon screen where you have the option to download the native Citrix Receiver, just click on “Log on”
- Now, add your application/desktop and click on it to launch
- You have your application running in a browser Tab!!
- For this, you will just need to have the latest Access Gateway 10 version 10.0.71.6014.e
Forum : You can use Receiver for HTML5 Forum for reporting issues, questions, and general discussions.
KB articles : You can refer to the below KB articles to troubleshoot some of the cases.
Known Issue : With Internet…
Continue reading here!
//Richard
The IT Melting Pot! 