Since XenApp and XenDesktop 7.9 and StoreFront 3.6, it is possible to use SAML authentication with a number of external identity providers and integrate that with the Citrix Federated Authentication Service so that users can be authenticated from NetScaler through to StoreFront.
netscaler
NetScaler nFactor authentication – Google reCAPTCHA first factor LDAP second – Citrix ADC 12.1.49.37 and below
Integrating reCAPTCHA by Google with Citrix NetScaler is a great move towards protecting internal resources from attackers. If someone or even a bot of computers are trying to brute force an account, or break in to your system, having reCAPTCHA is sure to defer such activies and make it a very difficult task to achieve.
Import NetScaler Gateway configuration in to StoreFront
It was quoted back at Citrix Synergy 2016 that the ability to import NetScaler Gateway configurations in to StoreFront was coming and it is here. StoreFront 3.6 that was released alongside XenApp & XenDesktop 7.9 can import NetScaler Gateway configurations that have been created using NetScaler firmware versions 11.1 build 48.10 and higher. No longer do you have to manually configure the NetScaler configuration within StoreFront. NetScaler 11.1.51.21 added the ability to export multiple NetScaler Gateway configurations and StoreFront 3.9 added the ability to import multiple configurations and hand select configurations to import.