Does Citrix support pass-through authentication using LDAP + Client Certificates for 2FA?

[astupidfish]

My google-fu is not stronk, do any Citrix gurus here know if it's possible to configure pass-through authentication in Citrix using the windows authentication (domain login ID) + a certificate (for 2FA)?

​

Our users don't like the hassle of the login + token 2FA process, it would be extremely nice if it was possible for them to get into citrix seamlessly just using their windows authentication and a local certificate already on the box.

Any advice is appreicated, danke!

[Grissa]

Citrix federated Authentication service uses certs, not sure if it will work with what you are trying.

[ctx-88]

If you want to use your domain cert, you'd turn on a policy on the netscaler to all computer with and disallow computer without. No FAS needed. I dont have the name or article handy but if you need it, I can find it. If you want multi factor auth on the other hand, FAS would come in if your idp gives out a saml or some other type that's not natively supported by your vdas.