is there a way to selectively enable FAS through citrix cloud gateway only for testing?

You could create a test resource location, catalog and delivery group. The use conditional auth to set up a separate url and idp for that url. But i would really recommend have a dev tenant. It has more options in the future.

ah ok, I haven’t touched conditional auth in over 6 months, I’ll look there, thanks!