This post has already been read 8204 times!
We can now move onto Part 6 of this series, Configuring StoreFront to allow access!
The previous parts in this series can be found by using the below links.
Part 1 – Summary of NetScaler, XenDesktop, FAS and Google
Part 4 – Citrix Federated Authentication Services
Part 5 – NetScaler Configuration
The first thing you will need to do is set the StoreFront to accept incoming connections from your new NetScaler URL’s
Click on Manage NetScaler Gateways and add a new gateway for both external URL’s citrix.googlesummit.com and login.googlesummit.com
Make sure you add a callback URL for both of the gateways
Then enable remote access to your store from your new NetScaler Gateways but leave the default gateway option as the citrix.chromesummit.com gateway
Make sure that you have BOTH gateway URL’s defined as external beacons for the StoreFront Server Group
Next you will have to enable Smart Card authentication to your store. Click on Manage Authentication Methods and enable Smart Card
Next under the options for Pass Through from NetScaler Gateway select Configure Delegated Authentication
Select to Fully Delegate Credential Validation to NetScaler Gateway
Finally you need to enable Smart Card authentication on your Receiver for Web site. Configure your site you are using for Unified Gateway and select to allow Smart Card Authentication
That’s StoreFront configured.
At this stage it will all work as expected – so go ahead and test it.
HOWEVER – If like me you are a bit of a perfectionist then there are some addition configurations you should make to ensure the user has a great experience and that your deployment is secure. I will cover those off in the final post in this series.
Thanks,
Dave Brett (@dbretty)