Looking to integrate Citrix Gateway Standard (no nFactor!) to Azure Conditional Access so users can log in to Citrix Gateway using Azure MFA. Been looking at @Aaron Parker’s great article at https://stealthpuppy.com/netscaler-azure-ad-conditional-access/. Is this still the way to go? We're semi-interested in the Azure Myapps portal and integrating on-prem Citrix apps/desktops into it for sure. I'm guessing without nFactor we won't be able to have users authenticate on our Gateway, they will have to authenticate on an AAD-hosted login page then SAML back down to Gateway? Can they then land straight onto Storefront (presumably need FAS unless Storefront supports SAML?)? Or do we need to go the whole hog and integrate the apps/desktops into Azure portal? What do others do?