Administrator Guide

3. Ensure that the secondary authentication is none.
4. Add the following INI parameter in the wnos.ini file, and configure your file server:
pnliteserver=<fqdn of NS Server> Storefront={yes,no}
For more information about configuring Citrix NetScaler Gateway with DUO authentication, see the Citrix NetScaler Gateway
Guide at www.duo.com.
Using Citrix NetScaler with CensorNet MFA authentication
SMS PASSCODE is re-branded as CensorNet MFA. You can configure NetScaler Gateway to use a One Time Passcode/
Password (OTP) in the form of a personal identification number (PIN) or passcode. To obtain this one-time password, you must
install CensorNet app on your mobile. After you enter the passcode or PIN, the authentication server invalidates the one-time
password. You cannot enter the same PIN or password again. For more information about configuring one-time passcode, see
the Citrix documentation.
Prerequisites
● NetScaler v12.0 and later is installed on your client.
● SMS PASSCODE v9.0 SP1 is installed and configured in your network. You can download the SMS PASSCODE v9.0 file from
download.smspasscode.com/public/6260/SmsPasscode-900sp1.
● Remote Authentication Dial-In User Service (RADIUS) authentication policy is configured and bind to the NetScaler gateway
server.
● CensorNet app is installed and configured on your mobile device.
To use the one-time passcode on ThinOS, do the following:
1. Log in to ThinOS, and connect to the NetScalar Gateway URL.
2. Enter your credentials (user ID and password), and press Enter.
The PASSCODE dialog box is displayed. You will receive a push notification from the CensorNet App on your phone with the
code.
3. Click OK.
98
Configuring the connection brokers