Forum Discussion
Conditiona access policy forCitrix Xenapp browser applications
Hello,
What do you mean by a trusted device in this context? Are you referring to compliant devices managed by Intune, Entra joined devices, or Entra Hybrid joined devices?
If I understood the requirements correctly, you should implement the following:
CAP1: Required MFA for Untrusted devices
- Condition > Filter for devices (exclude trusted devices)
- Grant > Required MFA
CAP2: Require MFA for Untrusted locations
- Condition > Exclude Trusted Network locations
- Grant > Require MFA
Trusted device is domain joined /hybrid joined
Trusted devices from untrusted locations :CAP2 will be applied.Is this correct?
Untrusted device from Trusted location:CAP1 will be applied.Is this correct ?
Trusted devices opening xenapp browser application :No MFA required : How i achieve this ?
Untrusted device opening xenapp browser application: No MFA required : How i achieve this ?
Truste device from trusted location : No MFA required :How i achieve this ?
Thanks
Imran Nawaz
The example I provided ensures that MFA is required every time someone accesses the app from an untrusted device, regardless of their location. Additionally, MFA is required for trusted devices only if they are accessing the app from an untrusted location.
