Using Azure AD MFA with Citrix ADC

user_16465190 0
Viewed 644

We have been tasked with adding MFA to our Citrix ADC/Gateway logins using Azure AD MFA. We are currently on Citrix ADC 13.0 with Standard Edition License which doesn’t allow us to utilize Citrix’s built in nFactor feature.

Azure MFA Server has been deprecated so that is no longer an option. We’ve looked at https://docs.citrix.com/en-us/advanced-concepts/implementation-guides/citrix-gateway-microsoft-azure.html, but the solution it proposes seems much more complicated than what we’re looking to implement.

From everything I've read, my understanding is that it would involve Azure AD Conditional Access, but not sure how to tie that to the Citrix ADC.

Anyone have experience with implementing MFA on Citrix ADC using Azure AD?

multi-factor-authentication citrix-access-gateway citrix azure-active-directory azure
1 Answers

You need to use NPS server to setup azure ad Cloud MFA for Citrix ADC

The Network Policy Server (NPS) extension for Azure AD Multi-Factor Authentication adds cloud-based MFA capabilities to your authentication infrastructure using your existing servers.

The NPS extension acts as an adapter between RADIUS and cloud-based Azure AD Multi-Factor Authentication to provide a second factor of authentication.

You need to configure you NPS server

  • Install NPS Extension
  • connect NPS server with azure ad
  • Configure your NPS server and create new radius client on the NPS server
  • Create a connection request policies (forward, network)
  • Configure the radius server for authentication
  • Activate azure MFA for user

Please refer this to for step-by-step process

Reference for NPS integration with azure ad

user_159690770
Related