To configure NetScaler Gateway in Workspace ONE Access, specify a Secure Ticket Authority (STA) server for each XenApp farm in your Citrix deployment. The STA server is used to generate and validate STA tickets during the application or desktop launch process.

When a user launches a Citrix application or desktop, Workspace ONE Access obtains a ticket from the STA server. The ticket is presented to NetScaler Gateway, along with other information, and NetScaler Gateway validates the ticket with the STA server before establishing a secure connection to the XenApp farm.

Note: The information in this topic also applies to Citrix Secure Gateway.
Note: This procedure is required only if you are integrating your Citrix server farm with Workspace ONE Access using the Web Interface SDK. It is not required if you are using StoreFront.



  1. In the Workspace ONE Access console, select the Catalog > Virtual Apps Collections tab.
  2. Click the collection for which you want to specify an STA server, then click Edit.
  3. In the Edit Citrix XenApp Collection wizard, click Server Farm in the left pane.
  4. Click the server farm to edit.
  5. Scroll down to the STA Server section and click Add STA Server.
  6. Enter the STA server URL in the following format:

    For example:

    Only alphanumeric characters, period (.), and hyphen (-), are allowed in the URL.

  7. Add additional STA servers, if necessary, by clicking Add STA Server.
    Your deployment may include a second STA server for failover purposes, for example.
  8. If you added multiple STA servers, arrange them in failover order by clicking the handle at the left of each row and dragging the row to the desired position.
  9. Click Save.
  10. If there are multiple XenApp farms in your deployment, repeat these steps to specify an STA server for each farm.

What to do next

Configure policies for specific network IP ranges that specify that launch traffic should be routed through NetScaler Gateway to the XenApp server.