Question:
Enhanced authentication feedback not working properly on Cascade authentication
Answer:
When cascading authentication policies are in use, a login attempt is evaluated against each authentication policy until a successful match is found.
When enhanced feedback is enabled, the response of the last evaluation attempt is returned to the user, so if a user fails complexity requirements on the first policy, but then is evaluated against other policies where the user does not exist, the feedback provided will be that the user could not be found or does not exist.
Suggestion is to implement the use of auth cookies as a potential workaround, so each user would only be evaluated against 1 of the authentication policies, based on the domain selected from the dropdown list..
Reference : https://support.citrix.com/article/CTX203873
Therefore currently it is not supported and you might see inconsistency or generic message with cascade multi factor authentication
An Enhancement is raised to address this issue and the details are as below :
0505304 :Enhanced Feedback Support should provide relevant feedback, even when cascaded authentication policies are in use.