Citrix StoreFront

Authentication methods

To configure the authentication methods available for a store, see Configure Authentication. You can override some of these settings for a particular website. These overrides only apply when users open the store in a web browser. Locally installed Citrix Workspace app uses the settings from the store rather than the website.

Warning:

Any time you change the authentication methods for a store, this overrides the settings for all websites for that store so any changes must be re-applied.

To modify authentication methods when using a web browser, go to Edit Receiver for web site and select the Authentication Methods tab.

Screenshot of Authentication Methods screen

  • Select the Username and password check box to enable explicit authentication. See User name and password authentication. This option is only available if it’s enabled for the store.
  • Select the SAML Authentication check box to enable integration with a SAML Identity Provider. See SAML authentication. This option is only available if it’s been enabled for the store.
  • Select Domain pass-through to enable pass-through of Active Directory domain credentials from users’ devices. See Domain pass-through authentication. This option is only available if it has been enabled for the store.
  • Select Smart card to enable smart card authentication. See Smart card authentication.
  • Select Pass-through from Citrix Gateway to enable pass-through authentication from Citrix Gateway. Enable this if users connect to StoreFront through a Citrix Gateway with authentication enabled. See Pass-through from Citrix Gateway.

If you select multiple authentication methods then the default authentication method for users logging in directly to StoreFront is determined according to the following order of precedence:

  1. Domain pass-through
  2. Smart card
  3. SAML
  4. Username and password

The user can choose to switch to a different authentication method. An exception is that if you configure both SAML and username and password authentication then users are not able to switch to Username and password authentication.

When users log out, they can choose whether to remember the authentication method for next time.

Configure using PowerShell SDK

To configure the available authentication methods using the PowerShell SDK, use the cmdlet Set-STFWebReceiverAuthenticationMethods.

Authentication methods