Dell ThinOS 2402 Administrator’s Guide

FIDO2 authentication when connecting to on-premises stores

From ThinOS 2402 and Citrix Workspace App 2311, you can authenticate using FIDO2 security keys, which do not require passwords, when signing in to on-premises stores. Citrix Workspace app uses the ThinOS Extension as the default browser for FIDO2 authentication in ThinOS. Administrators can configure the ThinOS Extension using Admin Policy Tool or Wyse Management Suite policy settings to authenticate to CWA. To enable FIDO2 authentication for logging in to on-premises stores, do the following:

1. Open Admin Policy Tool or Wyse Management Suite policy.
2. Go to Broker Settings > Citrix Virtual Apps and Desktops Settings.
3. Set Broker server address to the address that has enabled FIDO2 authentication method.
   NOTE:FIDO2 Security Key to log in to Citrix ADC with OKTA SAML MFA and FIDO2 Security Key to log in to Citrix ADC with Azure AD MFA are two test environments that can be used in ThinOS.
4. Enable WebLogin Use External Engine.
5. Ensure that WebLogin Use ThinOS Extension is ThinOS Extension. ThinOS Extension is the only supported extension and is the default value.
   NOTE:To use ThinOS Extension, install the ThinOS Extension application package and enable the policy.

   NOTE:Do not use the Citrix Enterprise Browser (CEB).
6. Click Save & Publish.
7. Sign out or restart the device for the settings to take effect.
8. In the webview login window, enter the PIN code of the Yubikey device.
9. Touch the Yubikey device to log in to the Citrix broker server.