How would you create conditional access policies to stop people using cert based auth outside of VDI? I’m wanting to use CBA in VDA using the FAS cert, but the issue is that if the user logs in outside of citrix, it will try to use the last authentication method they used, and they don’t have access to that cert outside of VDI. Because they are int he office and the public IP is the same in VDI and on the laptop, I can’t use different network locations either. Any ideas? Slack Conversation