Dell ThinOS 2402 Administrator’s Guide

Log in to Citrix ADC using MFA with SAML, OKTA as IDP, and Citrix FAS for SSO to VDA

This section describes how to log in to Citrix Application Delivery Controller (ADC) through Multiple Factors Authentication (MFA) with Security Assertion and Markup Language (SAML). This section also describes how to log in to Citrix ADC using OKTA as the identity provider, and Citrix FAS for Single Sign-On (SSO) to VDA.

1. From the desktop menu, go to System setup > Remote Connections.
   The Remote Connections dialog box is displayed.
2. Click the Broker Setup tab and select Citrix Virtual Apps and Desktops from the Broker Type drop-down list.
3. Enter the Citrix ADC gateway server URL in the Broker Server field. You can also configure other options.
4. Click OK.
   The NetScaler gateway Webview login window is displayed, and you are redirected to Okta IDP for authentication.
5. Enter the user credentials with UPN format and password.
   If you have not registered your phone with Okta Verify, you are prompted to setup MFA.
6. Select Enter a code or Get a push notification security method using Okta Verify application.
7. Launch the Okta Verify application on your phone.
   • If you selected Enter a code previously, enter the code in the Citrix ADC login window and click Verify.
   • If you selected Get a push notification, approve the push notification on your phone once you get it.
   If the authentication is successful, you are logged into Citrix ADC.

   NOTE:ThinOS does not support Okta Single Sign-On (SSO) with Certificate Authentication.

   In ThinOS 2208 (9.3.2102), after logging into a VDI Broker agent with Web Authentication and locking the ThinOS session, you must set a temporary password to unlock the system.

   From ThinOS 2211 (9.3.3096) onwards, a temporary password is not required. You can use the password that is used at the time of logging in to unlock the system directly