Citrix Gateway

Understanding the Citrix Gateway MDM Integration with Intune

January 21, 2022

Contributed by:

C S

The following is an example flow of events in a typical Citrix Gateway MDM Integration with Intune:

Enroll a mobile device with Intune.
Corporate approved applications and device policies are pushed to the device.
Browse SharePoint (on-premises application) from the device.
The browser request goes to Citrix Gateway.
The Citrix Gateway appliance checks with Intune for the enrollment status of the device.
If a compliant device is enrolled successfully, the SharePoint access is granted.

Intune and Citrix ADC integration

When a device doesn’t meet a conditional access policy, the Citrix Gateway VPN client displays an error message. The message provides a link from the device to a page hosted by Intune that gives the user the option to enroll or to remediate the device’s compliance status.

Note:

Administrators must ensure the following while pushing the certificates to Intune so that the users can differentiate between the various certificates on their device.

Certificates must have a subject summary.
The subject summaries for different certificates must be distinct.

Intune NAC v2 API support

As part of Intune NAC v2 API support, you must bind a Certificate Authority file (CA certificate) to ensure that the Citrix ADC appliance gets a valid certificate from mobile devices. In Intune NAC v2, the mobile devices send device IDs as part of the CA certificate. The CA certificate bound here must be the one used to issue client certificates to the end-user iOS and Android devices. If there are intermediate certificates, those must also be bound here.

For more details, see Intune NAC v2 API support

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Understanding the Citrix Gateway MDM Integration with Intune

January 21, 2022

Contributed by:

C S

January 21, 2022

Contributed by:

C S

Understanding the Citrix Gateway MDM Integration with Intune

Intune NAC v2 API support

In this article