Anyone doing ZTNA with Citrix Secure Private Access? I need to get up to speed on how to deploy SPA quickly. I'm having a tough time wrapping my head around where to get started and wondering if anyone else has been there.

SPA is part of the Platform License. Only way to use SPA, is in combination with W365.

SPA can be used outside of W365

Correct it is part of platform, but it can be leveraged by non-W365 if the customer is licensed for platform

Ok, then the part ‘If you don’t have platform, you can only use SPA for W365’ was missing. It was malformed.

That's correct. Part of Platform, but if you don't have Platform, you can use it with W365. I did some reading last night and I think where I was getting tripped up was Cloud Native vs Hybrid SPA. If my goal is to deliver internal web apps, I would need to deploy the Hybrid solution - which requires NetScaler Gateway and StoreFront. But it appears I can also deploy internal web apps with the Cloud Native solution.

Correct cloud native just means you manage and route the traffic through GaaS. On-prem you would have SPA controllers and NetScaler on-prem. There is a newer hybrid option but I haven't don't much with that

Deployed SPA recently. If you're attached to the cloud, it's only a matter of deploying the Connector Appliance and then configuration of Application and Policies. You can be ready quite fast.

It must use the appliance and not the Windows-based cloud connectors, right?

Yep, two separate things, even if they share the "Connector" name.

Cloud connector = Windows Connector appliance = Linux