You can provide Workspace ONE users access to Citrix-published resources by integrating your Citrix deployment with VMware Identity Manager. Citrix-published resources include applications and desktops within Citrix XenApp and XenDesktop server farms. Desktops are also referred to as Citrix-published delivery groups.

You manage Citrix-published applications and desktops in the Citrix administrative interface. You also set user and group entitlements in the Citrix interface, not in the VMware Identity Manager service. You must sync these users and groups to the VMware Identity Manager service from Active Directory before integrating with the Citrix server farms.

To integrate Citrix server farms with VMware Identity Manager, you create one or more virtual app collections in the VMware Identity Manager console. The collections contain the configuration information for the server farms as well as sync settings.

You can set up a sync schedule for each collection to regularly sync resources and entitlements from the Citrix server farms to the VMware Identity Manager service.

After you integrate the Citrix server farms, you can view the synced resources and entitlements in the VMware Identity Manager console. You can also edit ICA session settings, such as the settings that control resolution or compression. You can configure the settings globally for all the Citrix resources in the VMware Identity Manager catalog, or for individual Citrix resources.

End users can launch Citrix-published applications and desktops from the Workspace ONE portal or app. They install Citrix Receiver on their systems and devices to access the resources to which they are entitled.

Note: VMware Identity Manager supports Citrix deployments that include Citrix NetScaler.

Supported Versions

  • VMware Identity Manager supports Citrix XenApp 6.0 and 6.5, XenApp and XenDesktop 7.x, and Citrix Virtual Apps and Desktops 7 1808.
    Note: XenApp 5.x is no longer supported.
  • VMware Identity Manager supports Citrix StoreFront API 2.6 and later.
  • Supported operating systems for the Integration Broker, the VMware Identity Manager component that communicates with the Citrix server farm, are Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016.
  • Integration Broker version requirements:
    VMware Identity Manager or Connector Version Integration Broker Version Supported
    VMware Identity Manager 19.03 19.03
    VMware Identity Manager Connector 19.03.0.0 19.03
    VMware Identity Manager 3.3 3.3
    VMware Identity Manager Connector 2018.8.1.0 (connector released with VMware Identity Manager 3.3) 3.3
    VMware Identity Manager 3.2 3.2
    VMware Identity Manager Connector 2018.1.1.0 (connector released with VMware Identity Manager 3.2) 3.2
    VMware Identity Manager 3.1 3.1
    VMware Identity Manager Connector 2017.12.1.0 (connector released with VMware Identity Manager 3.1) 3.1
    VMware Identity Manager 3.0 3.0
    Mware Identity Manager Connector 2017.8.1.0 (connector released with VMware Identity Manager 3.0) 3.0
    VMware Identity Manager 2.9.1 or earlier 2.9.1 or earlier
    VMware Identity Manager Connector 2.9.1 or earlier 2.9.1 or earlier
    Note: To use the Citrix StoreFront API, Integration Broker 2.9.1 or later is required. For XenApp or XenDesktop 7.x, Integration Broker 2.6 or later is required. To use the NetScaler feature, Integration Broker 2.4 or later is required.
Note: Using the latest available version of VMware Identity Manager and its components is recommended.

Supported Authentication Methods

VMware Identity Manager only supports user name and password authentication on the XenApp server or NetScaler server. It does not support other authentication methods such as the following:
  • Smart Card
  • HTML 5
  • 2 factor authentication
  • SAML authentication (Citrix FAS)

Supported Features

VMware Identity Manager supports the following XenApp and XenDesktop features.

  • Application and desktop launch with Citrix StoreFront API 2.6 and later
  • Application group functionality

    VMware Identity Manager supports the application group feature introduced in XenApp and XenDesktop 7.9. Application groups are a logical grouping of applications and desktops, and entitlements can be provided at the application group level.

  • External launch with NetScaler
  • Disabling applications on the XenApp and XenDesktop server

    If the administrator disables an application on the XenApp or XenDesktop server, the application is hidden in VMware Identity Manager.

  • Limiting visibility for an application

    This feature sets the visibility for an application. VMware Identity Manager honors the entitlements set at the application level.

  • Showing an application to the entire delivery group

    In XenApp and XenDesktop, visibility for an application can be set to Show this application to entire delivery group. The application inherits the entitlements from the delivery group.

  • Entitlements at the desktop level

    VMware Identity Manager honors entitlements for desktops that are set at the desktop level.

  • Static desktop sync and launch

    Static desktops configured in XenApp and XenDesktop can be synced and launched from VMware Identity Manager.