Citrix Gateway end user experience

After you've installed and configured the RADIUS agent for Citrix Gateway, the end user experience is similar to the Citrix client experience before integrating with RADIUS. However, users will now be prompted for an additional validation factor after their normal sign-in.

If only a single MFA option is configured, regardless of the total available, users are prompted only for the single active MFA. When multiple MFA options are configured, users are prompted with a request to select one of the configured authentication methods.

Single-choice MFA Authentication

1. Go to your VPN URL.
2. Enter the Okta username and password.
3. Click Logon.
4. Answer the Okta MFA challenge.

Multi-choice MFA Authentication

1. Navigate to your VPN URL.
2. Enter Okta username and password.
3. Click Logon.
4. Respond to the MFA choice screen.
5. Answer the chosen MFA challenge.

See MFA for more information on multifactor authenticators.