Authentication Agent 1.5 Citrix StoreFront - Windows Domain authentication ?

[AdrianJones]

Hi,

We are doing some investigation into using the Citrix StoreFront Agent.

Testing to date we have managed to get it working and challenging for SecurID credentials as expected.

We are wondering if there is anyway to get it to challenge for Windows Domain credentials as well, like the Windows Agent does (if you haven't got Password integration enabled).

Some background to this. Our customer is concerned that if somebody accesses StoreFront from a non-domain joined machine they can gain access without being challenged for Windows Domain credentials (albeit they would be challenged for SecurID credentials). I appreciate this probably raises all sorts of questions in your mind about the customer network, but this is the question we are trying to answer.

[PiersB · Accepted solution]

The Citrix Agent is still required to provide Windows Credentials to complete the Windows portion of the authentication. These are maintained and provided by the AM server on a per-user basis; the agent does not provide generic credentials.

I would create an offline policy that does not permit Login Password Integration and associated it with a test user's Security Domain.