Two Factor Authentication
Activating 2FA for the Citrix Access Gateway
Note: As a necessary security measure, only 2FA enabled users will be able to access our systems remotely. If you are not enabled for 2FA and feel you should be, please discuss your needs with your manager for consideration.
When accessing our Citrix Access Gateway, https://citrix.dchs.org you will be presented with the following login page.
Enter your user ID, password, and click the “I accept the Terms and Conditions” checkbox. Then click the “Log On” button.
If your user account is not enabled for 2FA, you will see the following screen. You will also see the following screen if you entered your User name or Password incorrectly.
Slowly and deliberately wins the race. 🙂
If your DCHS account is activated for 2FA, you will see the following screen. Click “Start setup”
It is recommended to continue your setup for a mobile device.
Here is an example of adding a Mobile phone to your activation. After entering your mobile number, verify it is correct by checking the box, and click “Continue”
We selected the Android option in this example.
Note: iPhone / IOS devices have a slightly different option for activation. This is reviewed later on this page “iPhone / IOS Device Example”
To activate your DUO account on your mobile device, you will see a 2-D Barcode for scanning to your device like the following. (Without the green checkmark)
Next select your default authentication method and click “Continue to Login”.
To use this you will need to install the DUO App on your device. Below is an example of the display for an Android device.
Open your Duo App on your device and click the plus sign (+) sign in the upper right-hand corner to add your DCHS 2FA. If you have never use DUO Mobile before you will not need to press the plus sign first.
This will automatically activate your camera and scan the barcode once you have it in focus on your phone while holding it steady.
Once activated, you should see the Green Check and can now click “Continue”.
Once your Duo account is activated, you should see the following screen on your computer for 2FA.
Here you have 3 options for the Dual Factor Authentication as seen in image above.
- ”Send Me a Push” uses the DUO app on your smartphone.
- “Call Me” uses a standard telephone number (landline or cell phone) to process your second form of authentication.
- “Enter a Passcode” sends a passcode to your mobile device. This process sends a passcode to your mobile device via text message.
Once the second form of authentication is processed, you will be logged into StoreFront via the Citrix Access Gateway with 2FA, (2 factor authentication) so you can access your applications and begin working.
iPhone / iOS Device Example
After entering your phone number and clicking “Continue” it may automatically detect you have an iPhone and present this screen next.
After clicking “Verify” you will receive this screen providing you entered the code correctly. You will see a green check mark next to the “Verify” button. Click the “Continue” button.
Next you will be prompted to choose your default settings for 2FA on your device. We recommend choosing “Ask me to choose an authentication method”. This way depending on your circumstances you will have alternate methods to receive your “one time use” 2FA code when logging into our system.
After choosing your default option click “Continue to Login”.
Your final step will be to select your 2FA method for logging to Citrix. If you selected the recommended default in the previous step above, this screen will be presented to you every time you attempt to login to our Citrix Access Gateway, https://citrix.dchs.org
Select one of the 3 methods to receive your 2FA “one time use” code as seen in the example below.
Option 1: “Send Me a Push”. You will need to have your Duo mobile app open on your phone. Click the “Send Me a Push” button.
You should get a request at the top of your app in a green bar. Tap the green bar to continue.
Next you will see this screen in your app. Tap the Approve button before the request expires. If you wait too long to tap “Approve” you will receive an error and will need to start over with your login process.
After tapping “Approve” on your phone your computer screen will advance to your Citrix program icons so you are ready to begin working.
Option 2: “Call Me”. After clicking the “Call Me” button Duo will call you phone. Upon answering you will be prompted as follows;
“Welcome to DUO, if you are not expecting this call, please hang up. Otherwise, please press any key on your phone to login.” After pressing any key the auto attendant voice will state, “Thank you, good bye.”
This will be presented with your Citrix program icons so you are ready to begin working.
Option 3: “Enter a Passcode”. Click the “Enter a Passcode” button. The screen button will change to “Log In” and the box to the left will be selectable to enter your code. Click the “Text me new codes” button. Check your text messages for the new temporary code. Enter this in the box to the left of the “Log In” button and click the “Log In”.
After clicking “Log In” you will be presented with your Citrix program icons so you are ready to begin working.
IMPORTANT NOTE:
if at any time you receive a 2FA push notification, text message or phone call that you did not initiate, DO NOT accept the request and contact our help desk (x5505) to report this for follow-up by our security team.