You don't have to set up a new Authentication Proxy server for each application you create.

If you are already running a Duo Authentication Proxy server in your environment, you can use that existing host for additional applications, appending the new configuration sections to the current config. This Duo proxy server will receive incoming RADIUS requests from your Citrix Gateway, contact your existing local LDAP/AD or RADIUS server to perform primary authentication, and then contact Duo's cloud service for secondary authentication. To integrate Duo with your Citrix Gateway, you will need to install a local Duo proxy service on a machine within your network. You should already have a working primary authentication configuration for your Citrix Gateway users before you begin to deploy Duo. These instructions apply to both products.īefore moving on to the deployment steps, it's a good idea to familiarize yourself with Duo administration concepts and features like options for applications, available methods for enrolling Duo users, and Duo policy settings and how to apply them. In this configuration the Duo Authentication Proxy handles both primary and secondary authentication.Ĭitrix Gateway was formerly known as NetScaler Gateway. To add Duo two-factor authentication to your Citrix Gateway you'll configure two classic Basic RADIUS authentication policies - one that provides Duo's interactive enrollment and authentication prompts to browser-based Gateway logins, and a second one that responds to Receiver or Workspace client logins with an automatic authentication request via push notification to a mobile device or a phone call.

Learn more about the differences between Duo's Citrix Gateway deployment configurations. If you must use RADIUS authentication and your users need the ability to reset passwords from the Citrix Gateway and your Citrix edition license or Gateway build does not permit use of nFactor with advanced policies, see the Citrix Gateway nFactor Instructions or Citrix Gateway Basic Secondary Instructions. If you have Citrix Gateway build 12.1-51.16 or later with an 'Advanced' or 'Premium' edition license, or Citrix Gateway build 13.0-67.x or later with 'Standard', 'Advanced', or 'Premium' edition license, try Duo Single Sign-on for Citrix NetScaler, which includes Duo Universal Prompt support.

Dell wyse citrix receiver login