This article describes how to configure authentication at StoreFront using NetScaler Gateway - NetScaler Configuration.

Instructions

Configure Authentication at StoreFront using NetScaler Gateway

To perform the configuration on the NetScaler:

1. Navigate to the XenApp and XenDesktop option, and click the Get Started button
   

2. On the next screen, select StoreFront and click Continue
   

3. Next, enter the NetScaler Gateway information:

   • Gateway FQDN – Fully Qualified Domain Name that will be used to access the NetScaler Gateway

   • Gateway IP Address – IP Address for the NetScaler Gateway virtual server

   • Port – Port used (typically 443)

   • Redirect requests from port 80 to secure port - Enables NetScaler Gateway to redirect HTTP connections to an HTTPS secure connection.​ 

4. Click Continue
   Note: If the Load Balancing Feature is not enabled, the following message might be displayed. Select Yes if you want to enable this feature
   

5. Next, select a certificate.

6. Select Use existing certificate if a valid certificate is already installed on the NetScaler.

7. Select Install Certificate to add a new certificate to the NetScaler. In this case we select Install Certificate and click on Choose File.
   

8. Browse for the certificate, and once selected enter the Private key password to complete the installation
   

9. Click Continue.

10. Next, configure the StoreFront server information:

    • StoreFront URL - URL of the StoreFront server. Example: http(s)://StoreFront.domain.com
    • Retrieve Stores – This will force the NetScaler to contact the StoreFront server and retrieve the Receiver for Web site path
    • Default Active Directory Domain - This is the default domain for user authentication.
    • Secure Ticket Authority URL - Enter the secure ticket authority URL. This is typically present on the XenApp/XenDesktop Delivery Controller.
    • Use this StoreFront for Authentication – Check this box to have the StoreFront server perform the authentication instead of the NetScaler Gateway 

11. Click Continue.

12. On the following screen enter the following information:

    • Choose Authentication Type - StoreFront Auth is Selected
    • StoreFront URL – The StoreFront Server URL. This should auto-populate from the information entered in the previous screen
    • Retrieve Auth Enabled Stores – This will contact the StoreFront server retrieve the authentication endpoint for the store
    • Default Authentication Group - This is the default group that is chosen when the authentication succeeds in addition to extracted groups.
    • Domain - Domain of the server that is used for authentication. If users enter name without domain, this parameter is added to username in the authentication request

       

13. Click Continue. On the next screen, click Done.

14. Click Download file to download the configuration file so it can be imported into StoreFront.
    

15. Select Export selected virtual servers, Click the Click to Select button and select the virtual server
    

16. Select the virtual server and Click the Select button
    

17. Click OK.
    
    This will download the GatewayConfig.zip file we will use to import this configuration into StoreFront

• How to Configure Authentication at StoreFront using NetScaler Gateway – Requirements and Limitations
• How to Configure Authentication at StoreFront using NetScaler Gateway - StoreFront Configuration
• FAQ - Configuring Authentication at StoreFront using NetScaler Gateway