Citrix Gateway end user experience

After install and configuration of the RADIUS agent for Citrix Gateway the end user experience should be similar to Citrix client experience before integrating with RADIUS. However end users will now be prompted for an additional validation factor after traditional login.

If only a single MFA option is configured, regardless of total available, end users will only be prompted for the single active MFA after normal login.

If multiple MFA options are configured, users will first be prompted with a request to select of the the configured authentication methods. End users will enter the number corresponding to their preferred choice. After which , they will then be prompted complete that authentication method.

Single-choice MFA Authentication

1. Navigate to your VPN URL.
2. Enter the Okta username and password.
3. Click Logon.
4. Answer the Okta MFA challenge.

Multi-choice MFA Authentication

1. Navigate to your VPN URL.
2. Enter Okta username and password.
3. Click Logon.
4. Respond to the MFA Choice screen.
5. Answer the chosen MFA challenge.

See MFA for more information on multifactor authenticators.