This message was deleted.

The Traffic policy is needed after the change to basic auth, which wasn't there the last post was made. Have you looked at this CTX: https://support.citrix.com/article/CTX250706 Else you can try to take a capture on the gateway when logging on using an android device, then we can see what is sent to the SF (remember to capture sslkeys)

I did a trace and compared nfactor GW with a Classic GW. Can only see that the workspace app cant connect to the nfactor GW URL. Opened a Case but atm the engineer cant help me as he has no idea. Can reproduce this on all nfsctor gws I have (different nfactor flows) not able to add any account on android without the Option "add as webinterface". Wondering if this is an android thing as all is working fine on iOS.

Wrong place.

After some more troubleshooting I can confirm that this issue only exists in nfactor setups where the first factor is only username (group extraction). this never works on android. I can add other nfactor gateways without the error code 548. asking citrix engineer for technical clarification.

it is bad .. thanks for the info!