Enhanced authentication feedback not working properly on Cascade authentication

Enhanced authentication feedback not working properly on Cascade authentication

book

Article ID: CTX230677

calendar_today

Updated On:

Description

Question:
Enhanced authentication feedback not working properly on Cascade authentication

Answer:

When cascading authentication policies are in use, a login attempt is evaluated against each authentication policy until a successful match is found. 

When enhanced feedback is enabled, the response of the last evaluation attempt is returned to the user, so if a user fails complexity requirements on the first policy, but then is evaluated against other policies where the user does not exist, the feedback provided will be that the user could not be found or does not exist. 

Suggestion is to implement the use of auth cookies as a potential workaround, so each user would only be evaluated against 1 of the authentication policies, based on the domain selected from the dropdown list.. 

Reference : https://support.citrix.com/article/CTX203873 


Therefore  currently it is not supported and you might see inconsistency or generic message with cascade multi factor authentication

An Enhancement is raised to address this issue and the details are as below :
 0505304 :Enhanced Feedback Support should provide relevant feedback, even when cascaded authentication policies are in use.