Create a Citrix Policy, and in filters you should have this (at least with Cloud environment, my lab is not started, I can't tell). Or even better, "client name" as an iPhone's name always have "iPhone" in its name.
But it's tied to Secure Private Access I guess.