SAASPASS Multi-Factor Authentication and Single Sign-On · 1. Download SAASPASS app onto mobile device 2. Register company/organization through the mobile app or from computer 3

citrixready.citrix.com

Citrix Ready | SAASPASS Multi-Factor Authentication and Single Sign-On

SAASPASS Multi-Factor Authentication and Single Sign-OnSAASPASS secures access to your Citrix products with MFA together with SSO capability


SAASPASS is your key to the world! It provides a comprehensive and frictionless solution

that is fully-secured with dynamic passcodes and multi-factor authentication. It turns out

to be a great identity and access management tool you need to secure your corporate

network or your personal data.

Introduction

SAASPASS allows you to do with one product what it currently takes a combination of 4 to 5 other products to

do. Instead of stitching together two or more point solutions for multi-factor authentication such as single sign-

on, endpoint access, password management, and even physical control access, SAASPASS provides a

comprehensive full-stack identity and access management solution on the market. It’s a single product that

meets all of your identity needs, meets them with greater convenience and ease-of-use, at reduced total cost,

and without leaving holes in your digital security, such as when devices are offline. SAASPASS even helps lock

down Macs.

Solution Features

SAASPASS secures access to your Citrix NetScaler, Citrix StoreFront, Citrix XenApp, Citrix XenDesktop and Citrix

ShareFile accounts with Multi-Factor Authentication together with Single Sign-On capability.

SAML Protocol is used to delegate the authentication between Citrix (as the Service Provider) and SAASPASS

(as the IdP).

SAASPASS has numerous login methods that can be deployed by an admin.

The SAASPASS Advantage

• Meets all DFARS NIST 800-171 MFA requirements (both online and offline)

• Secures Macs and Pcs

• Single sign-on access to hundreds of enterprise applications (Salesforce, Office 365 etc.)

• Simple to implement

• Easy to use

• Scalable (pay for what you use)

• Reduces security complexity

SAASPASS mobile app features:

• Support for multiple devices

• Automatic sync across multiple devices

• Support for Single Sign-On and Autofill capabilities (with Username/Password entered)

• Support for Autofill on the desktop with the browser extension

• Support for Autofill in the embedded secure mobile browser

• iPhone and iPad Safari browser extension support

• Ability to create a recovery in case of broken/stolen device

• Ability to create a recover with custom security question

• Ability to restore from a backup or a cloned device

• Ability to use as a password manager first and then add the Authenticator format when needed

• Ability to add the Authenticator code to a service from another mobile app if that is supported

• Authenticator format with the most logos (over thousands and growing) in the world to clearly identify the

different services

• Ability to change the display name of a service (especially useful for services like Slack which can have the

same email for multiple services)

citrixready.citrix.com 2

• Security Checkup with recommendation engine in the Password Manager to easily identify services that

support the Authenticator format

• Search bar—especially useful for users with more than 10 Authenticator codes who have to scroll down

• Edit menu—useful for those who want to reorder the SAASPASS app or the world (that’s a future release)

• Device Management—ability to remote wipe a lost device

• Cross-platform support

• Authenticator codes are encrypted within the SAASPASS app

• PIN Protection

• TouchID/FaceID support on iOS devices

• Pattern support on Android devices

• Scrambled keypad option

• PIN is not stored inside the SAASPASS app (eliminating a potential security weakness)

• Support for Apple Watch

• Support for Android Watch

• Drag & Drop support on iPads with iOS 11 onwards

• iPad landscape and portrait mode support

• iPad split view support

• Quick copy for Authenticator codes

• Browser launches with Authenticator codes automatically saved

• Mobile password generator included

• Secure notes

• Custom layout

• HOTP & TOTP support

• Support for 6, 7 and 8 digit Authenticator codes

• Support for SHA1, SHA256, and SHA512

• Ability to manually alter algorithm in advanced options

• Enterprise sharing of Authenticator codes

• Data breach notification for compromised websites and services (based on publicly available news)

Scan Barcode Login

Scan an Encrypted QR Code with your SAASPASS Mobile App

Scan Barcode provides simple and quick two-factor authentication. Scan Barcode allows users to log in to

services and websites that produce a SAASPASS readable barcode. By scanning a barcode, users login instantly

to services or devices that support this format.

Users can also unlock computers with Scan Barcode and Computer Login by downloading the SAASPASS

Desktop Connector. SAASPASS Computer Login works with Scan Barcode to secure personal computers, or firm

desktops secured with active directory.

Scan Barcode is a simple and quick way to authenticate users to websites, Citrix applications and desktop

computers with two-factor authentication.

Push Login

Login Remotely by Receiving a Push Approval on your Device

Push Login provides simple and quick two-factor authentication. Push Login allows users to log in to services

and websites that produce are secured with SAASPASS by triggering a push approval request that is sent to their

SAASPASS mobile app. Users login instantly to Citrix services after approving it.

3



4


Manual Login

Manual/Offline Login Capability by typing a One-Time Password

Two-factor authentication is possible on any mobile device with SAASPASS one-time password generation.

SAASPASS one-time password generation is offline and user-generated to provide the traditional and historical

method of two-factor authentication. With a single touch, users can generate a one-time password to

supplement static usernames and passwords with added security. Users login instantly to Citrix services after

typing it in.

Proximity Login

Secure Login between your device and your Citrix Product with BLE

Proximity combines two-factor authentication with location-based iBeacon Bluetooth Low Energy (BLE)

technology to let users authenticate via their mobile device's proximity to their computer. Proximity

authenticates users to websites and applications and unlocks computers when integrated with SAASPASS

Computer Login for Macs.

FIDO/Hard Token/U2F Login

Secure Login between your FIDO/Hard Token/U2F and your Citrix product

SAASPASS allows you the ability to integrate third-party tokens to secure access to your Citrix product. The

Admin portal has an easy to use onboarding process which allows you to manage all the relevant users from a

single point.

Get Started Now!

SAASPASS can be deployed with Citrix products for the relevant employees' access but all in all, it can also be

deployed across the whole company. Additionally, it has a wide range of different integration environments

which work in tandem with the Citrix integration.

Get more information at or contact for a demo or for help with Citrix Ready Marketplace [email protected]

implementation.

Or, simply start on your own by following these steps:

1. Download SAASPASS app onto mobile device

2. Register company/organization through the mobile app or from computer

3. Go to the admin portal and begin setting up groups and users

4. Verify users with their corporate email or with a CSV upload

5. Once users have paired their accounts to SAASPASS IDs, go to "Company Applications” and find the Citrix

product you want to secure access to.

6. Roll out SAASPASS!

For any technical questions, please contact [email protected]

Relevant links:

Learn more about the SAASPASS - https://saaspass.com/

Register your company - https://www.saaspass.com/sd/#/companyRegistration

Introduction to SAASPASS - https://www.youtube.com/watch?v=1tzgAHPVkBY

How To Add Multi Factor Authentication (MFA) To Citrix - https://blog.saaspass.com/how-to-add-multi-factor-

authentication-mfa-to-citrix-3dcb962ef67e


citrixready.citrix.com/saaspass/saaspass-multi-factor-authentication-and-single-sign-on.htmlmailto: [email protected]://blog.saaspass.com/how-to-add-multi-factor-authentication-mfa-to-citrix-3dcb962ef67ehttps://blog.saaspass.com/how-to-add-multi-factor-authentication-mfa-to-citrix-3dcb962ef67e

5

About Citrix Ready

Citrix Ready identifies recommended solutions that are trusted to enhance the Citrix Delivery Center

infrastructure. All products featured in Citrix Ready have completed verification testing, thereby providing

confidence in joint solution compatibility. Leveraging its industry leading alliances and partner eco-system,

Citrix Ready showcases select trusted solutions designed to meet a variety of business needs.

Through the online catalog and Citrix Ready branding program, you can easily find and build a trusted

infrastructure. Citrix Ready not only demonstrates current mutual product compatibility, but through continued

industry relationships also ensures future interoperability. Learn more at www.citrix.com/ready.

Copyright © 2018 Citrix Systems, Inc. All rights reserved. [list Citrix trademarks (without ® or ™ symbols!) in

document] are trademarks of Citrix Systems, Inc. and/or one of its subsidiaries, and may be registered in the

U.S. and other countries. Other product and company names mentioned herein may be trademarks of their

respective companies.

Corporate HeadquartersFort Lauderdale, FL, USA

India Development CenterBangalore, India

Latin America HeadquartersCoral Gables, FL, USA

Silicon Valley HeadquartersSanta Clara, CA, USA

Online Division HeadquartersSanta Barbara, CA, USA

UK Development CenterChalfont, United Kingdom

EMEA HeadquartersSchaffhausen, Switzerland

Pacific HeadquartersHong Kong, China



Documents

SAASPASS Multi-Factor Authentication and Single Sign-On · 1. Download SAASPASS app onto mobile device 2. Register company/organization through the mobile app or from computer 3