StoreFront

Authentication

January 24, 2025

Contributed by:

C S

Authentication methods

Normally users either authenticate directly to StoreFront, or to a Citrix Gateway in front of StoreFront. Depending on your requirements, there are several authentication methods available.

Method	Detail
User name and password	Users enter their Active Directory username and password.
Domain pass-through	Windows devices single sign-on using the account they used to log in to Windows.
Smart card	Users swipe a smart card and enter a PIN. This uses the certificate stored on the smart card to authenticate the user.
SAML	Delegate authentication to third party identity providers using SAML.
HTTP Basic	Allows third party integrations to authenticate users using their Active Directory username and password. See the Post Credentials API in the Web API developer documentation. HTTP Basic does not provide a user interface for users to authenticate.
Pass-through from Citrix Gateway	Allow users to authenticate at a Citrix Gateway.

To select and configure which methods users can use to log into StoreFront through Citrix Workspace app, see Configure authentication. To select which methods users can use to log in using a web browser, see Configure Authentication for website.

Alternatively, when creating a new store, you can disable authentication and instead allow anonymous access to the stores. See Create store.

Single sign-on to VDAs

Some authentication methods include the ability to SSO to VDAs, see each individual authentication method for more details. Otherwise single sign-on can be achieved using Federated Authentication Service.

Authentication method customizations

You can customize existing methods or create your own authentication methods using the Authentication SDK.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Authentication

January 24, 2025

Contributed by:

C S

January 24, 2025

Contributed by:

C S

Authentication

Authentication methods

Single sign-on to VDAs

Authentication method customizations

In this article