For detailed information refer to Citrix Documentation - Configure nFactor for Citrix Gateway with WebAuth in first factor and LDAP with password change in second factor