This message was deleted.
# citrix-netscalers
Slackbot
11/17/2020, 11:42 PMThis message was deleted.
c
c4rm0
11/18/2020, 12:14 PMYou would have to deploy the okta radius agents in your on prem environment and radius is classed as legacy auth so your better off using the saml okta netscaler app with citrix fas as it is modern auth. MFA methods they both support the same voice/call/sms/okta verify using push and otp ect
c4rm0
11/18/2020, 12:15 PMi find the okta radius challenge screen also to be a little clunky the saml experience with okta is a lot smoother in my opinion
c4rm0
11/18/2020, 12:16 PMthis is the okta radius challenge
c4rm0
11/18/2020, 12:26 PMone other benefit of using SAML is if you have 3rd parties you can set them up with an account in okta eg jbloggs@corp.com then use shadow accounts to map that to an account in your domain all you have to do is add the @corp.com upn suffix in domains and trusts and set the upn of the shadow account to @corp.com. they never know the password of the ad account and cant login anywhere else