FIXED: Read my reply of May 8th. Citrix FAS is lately used more and more in our environment. So, I’ve automated that all applicable VDA’s are in 1 security group I can use for the VDA permissions. But after switching to that group I get On the FAS server event 205 [S205] Relying party access denied - the calling account [HOSTED\TSP62-SVR14$] is not a permitted relying party of the rule [default] On the VDA event id 104 [S104] Identity Assertion Logon failed. Failed to connect to Federated Authentication Service: UserCredentialService [Address][Index 0] [Error: Access Denied (FAS server) I did found https://support.citrix.com/article/CTX616742 but it’s not applicable as Everyone and Users are present. We are on-prem too btw.

make sure your fas servers are all listed in the FAS GPO that applies to your fas servers and the policy applying to your vda; in the same order for both.

Thanks Shane. That’s already in place.