Workspace ONE Access uses the Virtual App service and the Citrix StoreFront REST API to launch Citrix-published applications and desktops from the Workspace ONE Intelligent Hub portal or app. You can configure internal and external access to the Citrix-published resources. End users must install Citrix Workspace app or Citrix Receiver on their systems or devices to launch the applications and desktops to which they are entitled.

Note: Workspace ONE Access does not support Citrix Web Interface.

Launch Architecture Diagram (Internal Access)


Internal launch diagram

  1. A user launches a Citrix-published application or desktop from the Workspace ONE Intelligent Hub portal or app.
  2. The request goes to the Workspace ONE Access service, which sends it to the Virtual App service.
  3. The Virtual App service communicates with the Citrix server farm through the StoreFront REST API to authenticate and request the ICA file.
  4. The ICA file is retrieved and passed to the Intelligent Hub portal or app.
  5. The ICA file is passed to the Citrix Workspace app or Citrix Receiver.
  6. The Citrix Workspace app or Citrix Receiver launches the application or desktop.

Launch Architecture Diagram (External Access)

external launch diagram
  1. A user launches a Citrix-published application or desktop from the Workspace ONE Intelligent Hub portal or app.
  2. The request goes to the Workspace ONE Access service, which sends it to the Virtual App service.
  3. To communicate with the Citrix server farm to authenticate and request the ICA file, the Virtual App service sends a request to NetScaler through the StoreFront REST API.
  4. NetScaler forwards the request to the StoreFront server.
  5. The ICA file is retrieved and passed to the Intelligent Hub portal or app.
  6. The ICA file is passed to the Citrix Workspace app or Citrix Receiver.
  7. Citrix Workspace app or Citrix Receiver communicates with Netscaler.
  8. NetScaler communicates with the Citrix STA server with the STA ticket and gets the Citrix session server information.
  9. NetScaler communicates with the Citrix Session Host server and creates a session for application launch.
    Note: In version 7.x, the Citrix Session Host server is referred to as the Citrix VDA server.