Enterprise Browser live demo next week with Javier Lopez Santacruz & Wendy Gay! Should be an awesome session with this duo! https://mycugc.org/events/details/cugc-global-events-presents-connect-securing-web-applications-access-with-citrix-enterprise-browser-demo/

File from Jon Bucud (MyCUGC) with comment: I'm testing out SPA on-prem --Mobile CWA--> --ACVPN enabled NS Gateway --> internal web app and discovered that's not supported yet (ACVPN apps don't rewrite). Is this also a limitation with DaaS/Cloud SPA? Or does it (iOS/Android --Gateway Service -->Connector Appliance--> Internal webapp) work "up" there.

For on-prem SPA, is there a way to force the Storefront shortcuts like KEYWORDS: ?

Like mandatory @Jon Bucud ?

Yup, I think I found a workaround with Storefront Featured Apps and filtering with that.

Cool. Should just be normal StoreFront goodness.

I couldn't figure out how to do a keyword in Studio when the SPA objects never actually shows up in Studio. I wholly expected someone to respond with "Here's how to set Description in PowerShell"

Remember please use 🧵

File from Jon Bucud (MyCUGC) with comment: Trying to understand what this deprecation means. Does this mean iOS CWA is locked out of SPA until Enterprise Browser is supported in iOS CWA? (Currently limited to WebView)?https://docs.citrix.com/en-us/citrix-secure-private-access/citrix-secure-private-access-deprecation.html

hi All, started messing around with this. Right now I have a app published for Windows 365 online. Whenever I launch it the first time I get a mesage that it cannot start the saas app. then i click it again and it works fine. This happens to all of the web apps that i have tried. Any thoughts?

This message was deleted.

This message was deleted.

I know there's a way to "Disable" editing of the address bar in CEB, but is there a way to completely hide it from a user (much akin to Kiosk mode)?

SPA Monitor Integration just started automagically working today! 🎉

Am I dreaming or is the ability to import PFX directly into SPA Service App configs new?

I'm trying to setup a SPA Direct Access app, to allow client browser + iOS (WebView), access...but for some reason it keeps switching over to RBI and then bombing out (Application cannot be found since I don't have RBI configured). Support is telling me Native browser is not allowed for SPA, is that right that it's either CEB or bust? I followed this to a tee - Support for Enterprise web apps | Citrix Secure Private Access Internal App, [x] Agentless Access, (o) Inside my network, HTTP/HTTPS App, URL + Related domains all scraped from DevMode loading of the web app, CNAME validated, Kerberos config validated, Internal Connector(s) in correct resource location selected, Access Policy scoped to Sec Group. I see in the Diag logs, Native browser is detected, Policy is triggered via sec group, App Launch begins...then as mentioned it tries to pivot to RBI and that's where it fails after doing the RBI entitlement check.

“Native browser is not allowed for SPA” what i have been told as well.

Thanks for prompting me to circle back to this @James Terrell, I was able to get SPA to work with native browser by tearing down my SPA apps and building fresh, making sure that Agentless Access was ticked and no restrictions were configured . What I was told after my case was escalated was once you configure an Agentless App with restrictions, you can't modify it "downwards" / less restrictive, as the wizard already puts the CEB enforcement rules in the flow of the "app" launch. Now our users can either launch the SPA published, client browser accessible https://%ourorg%.cloud.com, and launch the unrestricted SPA published app from there in their own browser.

Nice. I need to look at this again as well then. My info was a little dated and we didn’t escalate it at the time. Guess doesn’t really matter as they move to Chrome Browser…

Has anyone moved to Chrome Enterprise Premium and its integration into Secure Private Access?

Hmm, all of our SPA apps just stopped enumerating. Failed transaction ID's dont come up in Monitor either.

How does one prevent direct access to an app from a chrome managed profile. I want them to be forced to come through the workspace app and then kicked over to a browser tab. I see it says allowed or denied depending on the secure private access config.

I'm finally getting ready to pivot from CEB to Chrome Enterprise, but I can't find where configure CEB vs Chrome Enterprise. I could have sworn there was a menu fly out where you selected CEB or Chrome Enterprise for SPA?

@Ramesh Gopal Krishna joined #citrix-spa-enterprise-browser. They’re also new to World of EUC.

More of a Google question, but CC'ing here as well, as it looks like #C08D46QF7T3 may be idle. https://worldofeuc.slack.com/archives/C08D46QF7T3/p1777387638771899

Well this will accelerate our CEB -> CEP migration... CEB apps hang on launch with CWA 2603.

The support "lead" on SPA ticket I have open is asking for VDA and CWA logs 🥃

Closing the loop on above... For context, I opened a case where we're doing Direct Access / Client Browser to internal web apps. Linux browsers (IGEL) were being blocked with an error 0x1800bf. Troubleshooting showed that if I spoofed UserAgent string, I could get to my webapps (Session pol eval issue it looked like). Eventually got past frontline, described what I was seeing to escalation...and engineering rolled a fix for me in <24hrs.

This is new/cool! For SPA internal Web apps that are configured for client browser access (Agentless+Allow/Allow), before if a user went to a SPA URL prior to going to Cloud Storefront/CWA they would get a generic "Invalid JWT" error. Now it has a splash page to send you to your gateway -> Storefront!