Right, it works for *.cloud.com domains, but not custom domains: Conditional Authentication | Citrix Cloud™ Known issues and limitations • Custom domains are not currently supported with Conditional Authentication. It is a roadmap item for future updates.