You can provide Workspace ONE users access to Citrix-published resources by integrating your Citrix deployment with VMware Identity Manager. Citrix-published resources include applications and desktops within Citrix XenApp and XenDesktop server farms. Desktops are also referred to as Citrix-published delivery groups.
You manage Citrix-published applications and desktops in the Citrix administrative interface. You also set user and group entitlements in the Citrix interface, not in the VMware Identity Manager service. You must sync these users and groups to the VMware Identity Manager service from Active Directory before integrating with the Citrix server farms.
To integrate Citrix server farms with VMware Identity Manager, you create one or more virtual app collections in the VMware Identity Manager console. The collections contain the configuration information for the server farms as well as sync settings.
You can set up a sync schedule for each collection to regularly sync resources and entitlements from the Citrix server farms to the VMware Identity Manager service.
After you integrate the Citrix server farms, you can view the synced resources and entitlements in the VMware Identity Manager console. You can also edit ICA session settings, such as the settings that control resolution or compression. You can configure the settings globally for all the Citrix resources in the VMware Identity Manager catalog, or for individual Citrix resources.
End users can launch Citrix-published applications and desktops from the Workspace ONE portal or app. They install Citrix Receiver on their systems and devices to access the resources to which they are entitled.
- VMware Identity Manager supports Citrix XenApp 6.0 and 6.5, XenApp and XenDesktop 7.x, and Citrix Virtual Apps and Desktops 7 1808 and 1912.
Note: Beginning with VMware Identity Manager 3.3, XenApp 5.x is no longer supported.
- VMware Identity Manager supports Citrix StoreFront API 2.6 and later.
- Supported operating systems for the Integration Broker, the VMware Identity Manager component that communicates with the Citrix server farm, are Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016.
- Integration Broker version requirements:
VMware Identity Manager or Connector Version Integration Broker Version Supported VMware Identity Manager 19.03 19.03 VMware Identity Manager Connector 19.03.0.0 19.03 VMware Identity Manager 3.3 3.3 VMware Identity Manager Connector 2018.8.1.0 (connector released with VMware Identity Manager 3.3) 3.3 VMware Identity Manager 3.2 3.2 VMware Identity Manager Connector 2018.1.1.0 (connector released with VMware Identity Manager 3.2) 3.2 VMware Identity Manager 3.1 3.1 VMware Identity Manager Connector 2017.12.1.0 (connector released with VMware Identity Manager 3.1) 3.1 VMware Identity Manager 3.0 3.0 Mware Identity Manager Connector 2017.8.1.0 (connector released with VMware Identity Manager 3.0) 3.0 VMware Identity Manager 2.9.1 or earlier 2.9.1 or earlier VMware Identity Manager Connector 2.9.1 or earlier 2.9.1 or earlierNote: To use the Citrix StoreFront API, Integration Broker 2.9.1 or later is required. For XenApp or XenDesktop 7.x, Integration Broker 2.6 or later is required. To use the NetScaler feature, Integration Broker 2.4 or later is required.
Supported Authentication Methods
- Smart Card
- HTML 5
- 2 factor authentication
- SAML authentication (Citrix FAS)
VMware Identity Manager supports the following XenApp and XenDesktop features.
- Application and desktop launch with Citrix StoreFront API 2.6 and later
- Application group functionality
VMware Identity Manager supports the application group feature introduced in XenApp and XenDesktop 7.9. Application groups are a logical grouping of applications and desktops, and entitlements can be provided at the application group level.
- External launch with NetScaler
- Disabling applications on the XenApp and XenDesktop server
If the administrator disables an application on the XenApp or XenDesktop server, the application is hidden in VMware Identity Manager.
- Limiting visibility for an application
This feature sets the visibility for an application. VMware Identity Manager honors the entitlements set at the application level.
- Showing an application to the entire delivery group
In XenApp and XenDesktop, visibility for an application can be set to Show this application to entire delivery group. The application inherits the entitlements from the delivery group.
- Entitlements at the desktop level
VMware Identity Manager honors entitlements for desktops that are set at the desktop level.
- Static desktop sync and launch
Static desktops configured in XenApp and XenDesktop can be synced and launched from VMware Identity Manager.