Auditing Group Policy changes is a good practice to apply to ensure no settings are removed or added that could affect end-user experience.
ADFS authentication direct to StoreFront 3.9 using SAML and Citrix Federated Authentication Service
Starting StoreFront 3.9, it is possible to use SAML authentication direct to StoreFront with ADFS and integrate that with the Citrix Federated Authentication Service. Users authenticate at the Identity Provider, the assertion is sent to StoreFront, a certificate is issued for authenticating to the VDA.
VDA Load Index for XenApp – Session Load Balancing
Load Balancing sessions is an important part of the Citrix architecure. It ensures your session is placed on the best available Virtual Desktop Agent. Afterall, you don’t want to end up on a VDA alongside 23 other people when there is another VDA with only 15 users logged on to it. Not only does such a mishap affect you, it affects everyone else who is sharing that server and resources with you.
NetScaler nFactor authentication – Google reCAPTCHA first factor LDAP second – Citrix ADC 12.1.49.37 and below
Integrating reCAPTCHA by Google with Citrix NetScaler is a great move towards protecting internal resources from attackers. If someone or even a bot of computers are trying to brute force an account, or break in to your system, having reCAPTCHA is sure to defer such activies and make it a very difficult task to achieve.