This message was deleted.
# citrix-netscalers
Slackbot
07/17/2020, 2:25 PMThis message was deleted.
e
Eric
07/17/2020, 2:34 PMSure
s
Steven Lemonier
07/17/2020, 2:42 PMYou confirm it would require FAS right?
m
Mike Streetz (O_P)
07/17/2020, 3:30 PMI’m pretty sure I’ve done this a long time ago, no FAS, can’t remember if it was using anonymous accounts or not
s
Steven Lemonier
07/20/2020, 7:54 AMOkay, thank you Mike
n
Neil Spellings
07/20/2020, 2:03 PMYes, you need to enable Kerberos constrained delegation to get the NetScaler to swap your certificate for a Kerb ticket to access AD resources (like your published apps/desktops and Windows login). This can still be 2FA if you protect the x509 certificate on a smart card with a PIN for example. (something you have+something you know)
4 Views