Netscaler 13.1 and Above: Global EULA Not Displaying on Citrix Gateway When Using Authentication Profile

book

Article ID: CTX695436

calendar_today

Updated On:

Description

  • When EULA is bound to a Gateway Virtual Server configured with an authentication profile, the EULA prompt does not appear during user login.

  • If the same Gateway is configured with basic authentication (without using an authentication profile), the EULA displays as expected.

  • This behavior occurs because the Global EULA configuration is not compatible with authentication profiles.

  • Authentication profiles leverage nFactor-based authentication, which bypasses the global EULA mechanism.

Cause

The global EULA is not supported when using authentication profiles.

Resolution

To ensure the EULA is presented when using an authentication profile, it must be configured as an authentication factor within the NetScaler nFactor authentication flow.

Recommended Steps:

  1. Configure a custom nFactor flow in NetScaler.

  2. Add the EULA as one of the authentication factors in the flow (typically as the first factor).

  3. Bind the nFactor flow to the Gateway Virtual Server through the associated authentication profile.

For detailed guidance, refer to the official Citrix documentation:
📄 Configure EULA as an authentication factor in nFactor

This configuration will ensure the EULA is properly displayed as part of the login sequence when using authentication profiles.

Issue/Introduction

End User License Agreement (EULA) does not appear when configured with a Gateway Virtual Server using an authentication profile. However, EULA displays correctly when basic authentication is used instead. The issue is related to incompatibility between global EULA configuration and authentication profiles.