In this configuration the Duo Authentication Proxy handles both primary and secondary authentication.Ĭitrix Gateway was formerly known as NetScaler Gateway.
To add Duo two-factor authentication to your Citrix Gateway you'll configure two classic Basic RADIUS authentication policies - one that provides Duo's interactive enrollment and authentication prompts to browser-based Gateway logins, and a second one that responds to Receiver or Workspace client logins with an automatic authentication request via push notification to a mobile device or a phone call. Learn more about the differences between Duo's Citrix Gateway deployment configurations. If you must use RADIUS authentication and your users need the ability to reset passwords from the Citrix Gateway and your Citrix edition license or Gateway build does not permit use of nFactor with advanced policies, see the Citrix Gateway nFactor Instructions or Citrix Gateway Basic Secondary Instructions. If you have Citrix Gateway build 12.1-51.16 or later with an 'Advanced' or 'Premium' edition license, or Citrix Gateway build 13.0-67.x or later with 'Standard', 'Advanced', or 'Premium' edition license, try Duo Single Sign-on for Citrix NetScaler, which includes Duo Universal Prompt support.
