#Native access server problem update#
#Native access server problem registration#

This LDAP Policy/Server verifies the entered passcode. Two-factor authentication to NetScaler Gateway after a device has been enrolled.An LDAP Policy/Server with authentication disabled and OTP Secret configured. This one OTP-specific LDAP Policy/Server can be used for two scenarios:.Make sure NTP is configured on the NetScaler.Christian in the comments indicated that Microsoft Authenticator also works. Click on plus sign -> other (Google,…).Since users can add multiple devices, the manageotp website must be protected from external access. The manageotpwebsite is usually only protected by single factor authentication.The LDAP bind account must have permission to modify this attribute on every user.Citrix’s documentation uses the userParameters Active Directory attribute. OTP stores device enrollment secrets in an Active Directory attribute that accepts Strings.nFactor requires a AAA vServer, which can be non-addressable – you don’t need any additional public IPs.Citrix Gateway VPN Plug-in 12.1 build 49 and later support nFactor when authenticating using the VPN Plug-in.Older Receivers and older NetScalers don’t support it, so you’ll instead have to use a web browser. Workspace app 1809 and newer with Citrix Gateway (NetScaler) 12.1 build 49 and newer support nFactor authentication.NetScaler ADC Standard Edition licensing is not sufficient. NetScaler Native OTP is part of nFactor, and thus requires Citrix ADC Advanced Edition (aka NetScaler Enterprise Edition) or Citrix ADC Premium Edition (aka NetScaler Platinum Edition) licensing.

#Native access server problem registration#

Citrix CTX228454 NetScaler One Time Password (OTP) Guide for Dual Authentication or Registration.

Citrix Blog Post NetScaler Unified Gateway Provides One Time Password (OTP), Natively.

YouTube video NetScaler Unified Gateway One Time Password.

A typical configuration uses Google Authenticator to generate Passcodes. NetScaler 12 Native OTP lets you enable two-factor authentication without purchasing any other authentication product.

2018 Mar 18 – in the Traffic Policy section, added info from Julien Mooren NetScaler – Native OTP is breaking SSL VPN.

2018 June 15 – Login Schemas – added link to Stan Demburg NetScaler Native OTP – Prevent Enrollment Of Additional Devices Externally.

Updated screenshots for Citrix ADC 12.1.

2018 Oct 6 – Overview – Workspace app 1809 and newer with Citrix Gateway (NetScaler) 12.1 build 49 and newer support nFactor (and OTP) authentication.

2019 Feb 4 – Login Schemas – added link to Morten Kallesoee n-Factor – restrictions on native OTP management.

#Native access server problem update#

Update Content Switching Expression for Unified Gateway.NetScaler Gateway and Authentication Profile.