As said in the requirements section, this is a pre-requirement (check out this article, for setup doing this). In case you haven’t got any Azure Active Directory, or Azure Active Directory sync connect (AADC) setup in your environment, please start doing this first.
Azure AD Connect software (Active Directory must be in sync with AzureAD).Configure the NetScaler RADIUS Authentication Policy.Your Citrix desktops will be shown to you, and you are good to go!Ĭlick on the title to get forwarded in the article: Once it receives the response, and when the MFA succeeds, it completes the authentication request by providing the NPS server with security tokens that include an MFA claim issued by Azure STS. The NPS server then connects to your on-premises Active Directory server to check the primary authentication request, if successful, the request is going back to the NPS, and through the installed NPS extensions the MFA request will be sent to Azure cloud-based to perform the secondary authentication. When a user initiates an authentication request, by entering his domain credentials on the NetScaler external logon page, the NetScaler server reacts and send the RADIUS authentication request to the NPS server. With this extension, you can add phone call, SMS, or phone app verification to your existing authentication environment. Microsoft provides an MFA – NPS Extension that automatically (pre-config) adds cloud-based MFA authentication support to your NPS – RADIUS clients – settings. This dedicated MFA server can now be replaced by an NPS server ( Network Policy Server Role), they must be installed on one of your on-premises servers.
One authentication method to rule them all! Let’s integrate even more services into the Microsoft Azure Cloud!Īs said, the on-premises MFA serve r was required.
This will now be over, after reading this article you will be able to configure an MFA RADIUS server for your NetScaler device, in just a few simple configuration steps! What makes it for most users a bit more complicated and confusing, when users must use different, physical or software token methods to provide external access, for other services like Citrix remote access. Nowadays more and more companies are migration their services to Office365, and most of them already use Azure MFA for securing their SharePoint, Exchange Online or OneDrive services. “ For every lock, there is someone out there trying to pick it or break in.” – David Bernstein
0 kommentar(er)
