This message was deleted.

When using RADIUS you need to bind the policies in the reverse order. Bear with me, will find you an article.

Yes good point Lee that bit be about a year ago.

Thanks @Leee Jeffries will take a look!

You're very welcome dude.

It's get stressful when things don't work. Hope you find it.

Leee is right. Make sure you use the LDAP credentials for SSO with Storefront.

Any questions, let me know David.

Cheers Lee just getting the kids to bed then will be free to look at it!

All good man, will keep my eye on the slack ;-)

Cheers Leee almost there. I get through workspace app initial auth request, user/pass/2fa, get presented with a list of stores, choose one, and then get prompted again. If i supply creds (user/pass/2fa again) then i'm cooking on gas. It's not obvious why i'm being prompted twice - presumably by SF the second time. I must be missing something obvious.

How did you configure Storefront authentication? Stores > Manage Citrix Gateways > Edit > Authentication Settings > Logon type

Domain and Security Token.

Try with Domain only

Still get prompted. I will re-read the Citrix article Leee linked to.

Do a putty session with your netscaler anc run: shell cd /tmp cat aaad.debug

No GSLB no. I'll check the aaa debug and get back to you - currently mass-enabling remote access and enrolling 2fa etc. after Boris Johnson's announcement earlier..... fun times.... 🧐 . So doubt i'll get to play with this until tomorrow, will report back.

I've literally just finished a change for a large client who is utilising SAML and Azure MFA on the gateway. Its fun times doing this stuff at pace. Let me know if you need a hand.