Administrator Guide

• SMS PASSCODE v9.0 SP1 is installed and configured in your network. You can download the SMS PASSCODE v9.0 file from

download.smspasscode.com/public/6260/SmsPasscode-900sp1.

• Remote Authentication Dial-In User Service (RADIUS) authentication policy is configured and bind to the NetScaler gateway server.

• CensorNet app is installed and configured on your mobile device.

To use the one-time passcode on ThinOS, do the following:

1. Log in to ThinOS, and connect to the NetScalar Gateway URL.

2. Enter your credentials (user ID and password), and press Enter.

The PASSCODE dialog box is displayed. You will receive a push notification from the CensorNet App on your phone with the code.

3. Click OK.

If the authentication is successful, then you are logged into the Citrix session.

Configure Citrix NetScaler using Okta

Okta provides Single Sign-On (SSO) capability using Remote Authentication Dial-In User Service (RADIUS) for Citrix Virtual Apps and

Desktops. ThinOS supports Okta through the Citrix NetScaler Gateway 11.0 or later. The Okta RADIUS Agent is used for user

authentication. The Okta RADIUS server agent assigns the user authentication to Okta using single-factor authentication (SFA) or

multifactor authentication (MFA).

For more information about configuring Citrix NetScaler Gateway to use the Okta RADIUS Agent, see the Citrix NetScaler Gateway

Radius Configuration Guide at help.okta.com.

NOTE:

• On the ThinOS client, you need FQDN at the login window. If you do not use username@fqdn during login, you must

set the following INI parameter:

pnliteserver=https://<fqdn of NS Server> CAGUserAsUPN=yes

After you enable this INI parameter, the domain must use the domain.com format in the login window.

• Phone authentication by using Okta is supported only in US and Canada.

Limitation

ThinOS supports only Okta with NetScaler Radius mode.

Citrix Cloud services

ThinOS supports Citrix Cloud services. It acts as a single management console to deploy applications or desktops on any virtual or cloud

setup for a secure digital workspace. For more information about Citrix Cloud services, see the Citrix Cloud article at docs.citrix.com.

Citrix icon refresh

Citrix applications can be refreshed by clicking Refresh from PNMenu.

There are two methods to refresh the Citrix applications:

• Manual refresh

• Auto refresh using the INI parameter

Refresh Citrix applications automatically by using INI parameter

To automatically refresh the Citrix application, set the following INI parameter:

SessionConfig=ICA RefreshTimeOut=dd:hh:mm

For example, 01:01:22, means the application will start refresh automatically, every 1 day: 1 hour: 22 minutes.

Refresh Citrix applications manually

To refresh the Citrix application manually, do the following:

1. For single StoreFront or PNAgent server, change the application in broker, and click Refresh from PNMenu.

Configuring the connection brokers