Citrix Endpoint Management

Authentication with Azure Active Directory Group-Based Administration

November 22, 2024

Contributed by:

Citrix Endpoint Management now supports group-based identity authentication for accessing its services through Azure Active Directory (AAD) and SAML identity providers. This update ensures that administrators can manage access at the group level using AAD group membership, offering flexibility and enhanced security. The legacy Citrix Identity login mechanism remains available as an alternative.

Key Enhancements

Azure AD Group Integration: Administrators can now manage user access to CEM services by leveraging Azure AD groups. This simplifies permissions management and allows for group-based access controls.
Citrix Endpoint Management Login Authentication with Azure AD Groups: Users can authenticate through Azure AD groups, providing seamless integration with existing organizational identity infrastructure.
Full Support for SAML: SAML identity providers can also be used for group-based authentication.
Legacy Citrix Identity Support: Citrix Identity login is still available, ensuring users can transition at their own pace.

Feature Flags

Citrix Cloud feature flag: fullAccessGroups – This feature is enabled by default to allow full access for groups.
Citrix Endpoint Management feature flag: cc.group.based.admin – Enables group-based administration functionality in Citrix Endpoint Management.

Prerequisites

Azure AD is configured in the Citrix Cloud portal.
Admin Sign-in URL for Citrix Cloud needs to be set for accessing Citrix Endpoint Management through Azure AD groups.

Configuration Steps

Log in to the Azure Portal and access Azure Active Directory.
Navigate to Users and select Create new user.
Navigate to Groups, click New group, and add the newly created user as a member of this group.
Log in to Citrix Cloud using Admin credentials to sign in.
Navigate to Identity and Access Management, assign either full or custom permissions to the new Azure AD group.
The user in the Azure AD group can now log in to Citrix Endpoint Management using the Admin Sign-in URL.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Authentication with Azure Active Directory Group-Based Administration

November 22, 2024

Contributed by:

November 22, 2024

Contributed by:

Authentication with Azure Active Directory Group-Based Administration

Key Enhancements

Feature Flags

Prerequisites

Configuration Steps

In this article