downloadWhy can't I download this file?Citrix Workspace Passcode Recovery
When I’m connecting from WAN with Workspace App, the first time I need to create an account. I’m asked for loginname, password and after the a new field for sms token is presented. Login works fine!When I then logoff Citrix Workspace, or reboot my laptop and login into the Workspace App, online loginname and password is asked. Citrix Workspace will prompt you to authenticate with your username, password, and a passcode. Next you will need to complete a two factor authentication through Duo to get the passcode. Duo Passcode options (registered devices): Type push to get a Duo Mobile app prompt (most Common).
Applicable Products
- Citrix ADC
- Citrix Gateway
Symptoms or Error
LDAP + Radius DUO works fine on browsers but on Workspace, only the first login shows password/passcode using LDAP first and Radius second. Subsequent logins give Password1 and Password2 and you have to enter Radius token first with LDAP secondary; if you try to enter LDAP first and RADIUS token second, auth will fail.
If you enter LDAP password then RADIUS token, then in a trace for POST to /cgi/login you will see that the form items are reversed and passwd, which should be your LDAP password is your Token instead. You will also see that passwd1 which should be the Token is your LDAP password instead.
If you enter LDAP password then RADIUS token, then in a trace for POST to /cgi/login you will see that the form items are reversed and passwd, which should be your LDAP password is your Token instead. You will also see that passwd1 which should be the Token is your LDAP password instead.
Solution
On Storefront's server, at Stores->Manage Citrix Gateways->Edit the Gateway used for the Store in question->Select 'Authentication Settings'->Set 'Logon Type' = 'Domain and Security Token Gateway'
Problem Cause
Citrix Workspace Passcode Recovery
Storefront is not configured for Domain plus Security Token