Is Kerberos supported with SF 3.12 with XA 7.15 LTSR and CAC card

[Network Admins1709153042]

Having trouble configuring F5 to use Kerberos for CAC card authentication.  Wondering if it's supported before I go through with installing FAS.

 

I want users to use CAC to log into SF and have them authenticated against AD.  My group is using F5 BIG-IP ADM to accomplish this instead of NetScaler.

 

Thank you.

[Jim Grimm1709160134]

According to the following F5 document, it is supported on Storefront 2.5 and higher:

https://www.f5.com/pdf/deployment-guides/citrix-vdi-iapp-dg.pdf

 

Quote

If deploying smart card authentication, be sure to see Appendix A: Citrix server changes required to support smart card authentication on page 42.

Note we currently do not support smart card authentication with StoreFront version prior to 2.5; only Web Interface server 5.4 and StoreFront 2.5 and later are supported.

 

The Citirx documentation for Storefront 3.12 contains additional references for consideration when configuring Smart Card authentication (starting on page 77)

https://docs.citrix.com/en-us/storefront/downloads/storefront-3-12.pdf

 

Please take a look at the following Citrix Blog post for some additional information on the subject:

https://www.citrix.com/blogs/2014/10/22/storefront-and-stiged-environments-smart-card-cac-login/