Project Silverton – Citrix XenDesktop, NetScaler, FAS and Google – Part 6

This post has already been read 8356 times!

We can now move onto Part 6 of this series, Configuring StoreFront to allow access!

The previous parts in this series can be found by using the below links.

Part 1 – Summary of NetScaler, XenDesktop, FAS and Google

Part 2 – Pre-Reqs

Part 3 – Google oAuth Setup

Part 4 – Citrix Federated Authentication Services

Part 5 – NetScaler Configuration

The first thing you will need to do is set the StoreFront to accept incoming connections from your new NetScaler URL’s

Click on Manage NetScaler Gateways and add a new gateway for both external URL’s citrix.googlesummit.com and login.googlesummit.com

Make sure you add a callback URL for both of the gateways

Then enable remote access to your store from your new NetScaler Gateways but leave the default gateway option as the citrix.chromesummit.com gateway

Make sure that you have BOTH gateway URL’s defined as external beacons for the StoreFront Server Group

Next you will have to enable Smart Card authentication to your store.  Click on Manage Authentication Methods and enable Smart Card

Next under the options for Pass Through from NetScaler Gateway select Configure Delegated Authentication

Select to Fully Delegate Credential Validation to NetScaler Gateway

Finally you need to enable Smart Card authentication on your Receiver for Web site.  Configure your site you are using for Unified Gateway and select to allow Smart Card Authentication

That’s StoreFront configured.

At this stage it will all work as expected – so go ahead and test it.

HOWEVER – If like me you are a bit of a perfectionist then there are some addition configurations you should make to ensure the user has a great experience and that your deployment is secure.  I will cover those off in the final post in this series.

Part 7 – The Nice To Haves

Thanks,

Dave Brett (@dbretty)