End user experience
Users can access applications through Secure Private Access using the following methods. Each access method provides a different user experience allowing organizations to choose the most appropriate approach based on their desired user experience and deployment strategy.
- Citrix Workspace App (CWA) - The native desktop application that provides the most secure and feature-rich access experience with full policy enforcement and single sign-on capabilities.
-
Workspace user interface (WSUI) - A web-based interface that can be accessed through different browser environments:
- Non-Chrome browsers (such as Firefox, Safari, or Edge)
- Chrome with non-managed profile (personal Chrome browser without enterprise policies)
- Chrome with managed profile (enterprise-managed Chrome browser with Chrome Enterprise Premium policies)
- Chrome managed profile - Users access applications directly by using bookmarks or manually typing the application URL in the address bar of a Chrome managed profile.
The following table summarizes the end-user experience when the applications are accessed using various methods:
| Direct | WSUI | CWA Workspace / StoreFront portal | ||
|---|---|---|---|---|
| Non-chrome browser
|
Access denied for SaaS apps (assuming that the SaaS apps have been configured with the appropriate IP address allow list). | Apps are enumerated in the Workspace / StoreFront portal. | Not-applicable
|
|
| Private apps are unreachable.
|
The applications are launched in the appropriate Chrome managed profile. | |||
| A profile creation wizard is launched if the respective managed profile has not been created already. | ||||
| Chrome (non-managed profile)
|
Access denied for SaaS apps (assuming that the SaaS apps have been configured with the appropriate IP address allow list). | The applications are launched in the appropriate Chrome managed profile. | Not-applicable
|
|
| Private apps are unreachable. | A profile creation wizard is launched if the respective managed profile has not been created already. | |||
| Chrome (managed profile) | Apps are allowed or denied depending on the Secure Private Access configuration. | The enumerated app is launched in a new tab. | Not-applicable | |
| CWA
|
Not-applicable
|
Not-applicable
|
Apps are enumerated in the Workspace / StoreFront portal. | |
| The applications are launched in the appropriate Chrome managed profile. | ||||
| A profile creation wizard is launched if the respective managed profile has not been created already. | ||||
End user experience
In this article
Copied!
Failed!