Extended support for the iframe-based traditional Duo Prompt in NetScaler RADIUS configurations will end on December 31, 2024. Customers need to migrate to a supported Universal Prompt solution or a RADIUS configuration without the iframe for continued support.
Clients can use Duo for NetScaler Web - OAuth if they upgrade to NetScaler version later than 14.1-29.63 and have at least an Advanced edition license. This provides Duo authentication via a direct OIDC connection to Duo without needing a proxy. Alternatively, authentication with Entra ID using Citrix Federated Authentication Services (FAS) for single sign-on allows using Duo with Conditional Access for a single authentication source.
If your NetScaler deployment does not meet the requirements for Duo via OAuth, you can reconfigure your existing radius_server_iframe Duo Authentication Proxy application to avoid using the iframe.
For more information or assistance in preparing and implementing best practices, please contact our team of experts at service@helient.com.