Multi-Factor Authentication for Citrix

Multi-Factor Authentication for Citrix

Multi-Factor Authentication for Citrix

Multi-factor authentication is required for UKG Pro Citrix Portal access. Any user who requires access to the UKG Pro Citrix Portal must request a security access code for each log in attempt.

The security access can be delivered via a Secure Code Generator, YubiKey™, U2F security key, voice call, text message, or e-mail.

Secure Code Generator, YubiKey™, and U2F are the preferred verification methods for multi-factor authentication. These methods provide instant authentication that does not rely on e-mail or cell phone carrier servers, expediting the log in process.

Secure Code Generator is an authentication method that utilizes a mobile app that can be downloaded from the Apple App Store and the Google Play Store. For example, the Google Authenticator mobile app utilizes time-based one-time password (TOTP) algorithms to generate a security access code for multi-factor authentication. There are other authentication apps that provide secure code generator access.

YubiKey™ is an USB authentication device, that is similar in appearance to a flash drive. All YubiKey™ devices are compatible for use with Citrix authentication. For more information on YubiKey™, go to the Yubico© website (https://www.yubico.com).

U2F security key is a cost-effective USB authentication device, that is similar in appearance to a flash drive. The U2F security key option is only available when using the Google Chrome browser.

Multi-factor authentication for UKG Pro Citrix Portal access requires the user to complete these tasks.

  • Enter a UKG Pro Citrix Portal user name and password. The Register Your Device page appears with the Secure Code Generator, YubiKey™, U2F, Call Me, Text Me, and E-mail options.
  • Select a method to receive a security access code:
    • For Secure Code Generator access, enter the code displayed in your preferred mobile app. Typically, the security code expires after 60 seconds. A new code is generated as soon as one code expires.
    • For YubiKey™ access, insert the YubiKey™ into the computer's USB port to gain secure entry to the UKG Pro Citrix Portal.
    • For U2F security key access, insert the U2F device into the computer's USB port to gain secure entry to the UKG Pro Citrix Portal.
    • For phone call, text message, or e-mail access, enter the security code to complete the log in process and gain secure entry to the UKG Pro Citrix Portal. If you do not receive your security access code via e-mail after it is requested, check your spam or quarantine e-mail folder and add "messages-noreply@UKGsoftware.com" to your safe senders list. There may be a lag time associated with your e-mail or cell phone carrier servers. The code expires after 5 minutes. If the e-mail or text message do not arrive within the 5 minute expiration window, you will need to request a new security access code. For these reasons, we strongly recommend that you also configure Secure Code Generator, YubiKey™, and/or U2F security key access for instant authentication.
Important

If your organization restricts access to certain websites via a proxy and IP filtering, please ensure that the necessary URLs and IP addresses are whitelisted.

Note

Browser support for Citrix portal access is the same as for the UKG Pro portal.

Register a Device for Multi-Factor Authentication for UKG Pro Citrix Portal Access

You can register one or more device for multi-factor authentication for UKG Pro Citrix Portal access.

You must authenticate with a security access code each time you log in to the UKG Pro Citrix Portal. You will have the option to register additional devices during the authentication process.

Citrix MFA Register Device

Register a Device Using a Secure Code Generator

Register a mobile device using the secure code generator mobile app of your choice for multi-factor authentication.

The Secure Code Generator authentication method leverages a mobile app that utilizes time-based one-time password (TOTP) algorithms to generate a security access code for multi-factor authentication.

To authenticate using this method, your preferred mobile app must first be downloaded from the Apple App Store or the Google Play Store. As an example, a great secure code generator application is Google Authenticator by Google.

Secure Code Generator utilizes the OATH authentication method and allows you to retrieve a 6-digit security access code from within your preferred mobile app. Typically, the security code expires after 60 seconds. A new code is generated as soon as one code expires.

  1. From the Register Your Device page, select Code Generator from the Secure Code Generator section. The Register Your Secure Code Generator page appears.
  2. From your preferred mobile app, select the option that allows you to scan a barcode. Refer to the app's help to identify how to scan a barcode.
  3. From your mobile device, scan the QR code displayed on the Register Your Secure Code Generator page. Your mobile app displays a 6-digit security access code.
    Citrix MFA Register Secure Code Generator
  4. Enter the security access code in the Register Your Secure Code Generator page access code field.
  5. Select Register. The UKG Pro Citrix Portal appears.

Register a Device Using the U2F Security Key Option

A U2F security key is a cost-effective USB authentication device, that is similar in appearance to a flash drive.

The U2F security key option only displays when using the Google Chrome browser.

  1. From the Register Your Device page, select U2F Security Key from the FIDO U2F Security Key section. The Register Your U2F Device page appears.
    MFA Register a U2F Device
  2. Select the FIDO Certified U2F graphic. The Waiting for your U2F Device page appears.
    MFA U2F Waiting
  3. Insert your U2F security key into a USB port on your computer. The U2F security key will blink when it ready for authentication.
  4. From your U2F security key, press the U2F button. The UKG Pro Citrix Portal appears.

Register a device using a YubiKey™

YubiKey™ is an USB authentication device, that is similar in appearance to a flash drive.

  1. From the Register Your Device page, select YubiKey™. The Register Your YubiKey™ page appears.
  2. Insert your YubiKey™ into a USB port on your computer.
  3. Place the cursor in the YubiKey™ field.
  4. From your YubiKey™ device, press the YubiKey™ button.
  5. Select Register. The UKG Pro Citrix Portal appears.

Register a Device Using the Text Option

Register your mobile phone number to receive a multi-factor authentication security access code through text message.

  1. From the Register Your Device page, select Text Me. The Register Your Mobile Phone page appears.
  2. Select the Country Code, as needed.
  3. At the Mobile Phone Number field, enter a 10-digit mobile phone number to receive the security access code.
  4. Select Register. The We Are Contacting You With A Passcode page appears.
  5. At the Enter Your Passcode field, enter the security access code received.
  6. Select Continue. The UKG Pro Citrix Portal appears.

Register a Device Using the Call Option

Register your phone number to receive a multi-factor authentication security access code through voice call.

If you do not answer the phone, a message will be left on the phone's messaging system, if applicable.

  1. From the Register Your Device page, select Call Me. The Register Your Phone Number page appears.
  2. Select the Country Code, as needed.
  3. At the Phone Number field, enter a 10-digit phone number to receive the security access code.
  4. Select Register. The We Are Sending You A Passcode page appears.
  5. At the Enter Your Passcode field, enter the security access code received.
  6. Select Continue. The UKG Pro Citrix Portal appears.

Register a Device Using the E-mail Option

Register your e-mail address to receive a multi-factor authentication security access code through e-mail.

E-mail is an acceptable option; however, Secure Code Generator, YubiKey™, U2F Security Key, and Voice are even more secure in instances where a user’s computer is compromised.

  1. From the Register Your Device page, select E-mail. The Enroll Your E-mail page appears.
  2. At the E-mail field, enter an e-mail address to receive the security access code.
  3. Select Register. The We Are Contacting You With A Passcode page appears.
  4. At the Enter Your Passcode field, enter the security access code received.
  5. Select Continue. The UKG Pro Citrix Portal appears.

Authenticate Using a Registered Device

Log in to the UKG Pro Citrix Portal and authenticate using a registered device.

If you registered one device, you can authenticate using the registered method after you enter your UKG Pro Citrix Portal login credentials. If you registered more than one device, you will have the option to select one of those devices to use for authentication each time you log in.

To add or delete authentication methods, check the Manage Verification Methods in the Next Step (optional) box when authenticating.

MFA Manage Devices

The Account Management screen appears after verification to allow you to add or delete a registered device.

  • Select Add a Device to register another device
  • Select Delete to remove a device registration
  • Select Continue to access the UKG Pro Citrix Portal
MFA Account Management Manage Devices

Authenticate to the UKG Pro Citrix Portal with a Secure Code Generator

Authenticate to the UKG Pro Citrix Portal with the secure code generator mobile app of your choice .

If you registered more than one device, from the Choose a Verification Method page, select Code Generator from the Secure Code Generator section. The Enter Your Secure Code Generator page appears.

  1. From your preferred mobile app, retrieve the 6-digit security access code.
  2. Enter the security access code in the Enter Your Secure Code Generator page access code field.
  3. Select Verify. The UKG Pro Citrix Portal appears.

Authenticate to the UKG Pro Citrix Portal with a U2F Security Key

Authenticate to the UKG Pro Citrix Portal with a U2F security key.

  1. If you registered more than one device, from the Choose a Verification Method page, select U2F Security Key. The Insert Your U2F Device page appears.
  2. Insert your U2F device into a USB port on your computer.
  3. From your U2F device, press the U2F button. The UKG Pro Citrix Portal appears.

Authenticate to the UKG Pro Citrix Portal with a YubiKey™

Authenticate to the UKG Pro Citrix Portal with a YubiKey™.

  1. If you registered more than one device, from the Choose a Verification Method page, select the Enter a Token option, if applicable. The Provide Your YubiKey™ Passcode page appears.
  2. Insert your YubiKey™ into a USB port on your computer.
  3. Place the cursor in the YubiKey™ field.
  4. From your YubiKey™ device, press the YubiKey™ button.
  5. Select Verify. The UKG Pro Citrix Portal appears.

Authenticate to the UKG Pro Citrix Portal with the Text Option

Authenticate to the UKG Pro Citrix Portal with the Text option.

  1. If you registered more than one device, from the Choose a Verification Method page, select the Text option, if applicable. The We Are Contacting You With a Token page appears.
  2. Once the security access code is delivered, enter the value in the Enter Your Passcode field.
  3. Select Verify. The UKG Pro Citrix Portal appears.

Authenticate to the UKG Citrix Portal with the Call Option

Authenticate to the UKG Pro Citrix Portal with the Call option.

  1. If you registered more than one device, from the Choose a Verification Method page, select the Call option, if applicable. The We Are Contacting You With a Token page appears.
  2. Once the security access code is delivered, enter the value in the Enter Your Passcode field.
  3. Select Verify. The UKG Pro Citrix Portal appears.

Authenticate to the UKG Pro Citrix Portal with the E-mail Option

Authenticate to the UKG Pro Citrix Portal with the E-mail option.

  1. If you registered more than one device, from the Choose a Verification Method page, select the E-mail option, if applicable. The We Are Contacting You With a Token page appears.
  2. Once the security access code is delivered, enter the value in the Enter Your Passcode field.
  3. Select Verify. The UKG Pro Citrix Portal appears.

© UKG Inc. All rights reserved. For a full list of UKG trademarks, visit www.ukg.com/trademarks. All other trademarks, if any, are the property of their respective owners. No part of this document or its content may be reproduced in any form or by any means or stored in a database or retrieval system without the prior written authorization of UKG Inc. (“UKG”). Information in this document is subject to change without notice. The document and its content are confidential information of UKG and may not be disseminated to any third party. Nothing herein constitutes legal advice, tax advice, or any other advice. All legal or tax questions or concerns should be directed to your legal counsel or tax consultant.

Liability/Disclaimer

UKG makes no representation or warranties with respect to the accuracy or completeness of the document or its content and specifically disclaims any responsibility or representation for other vendors’ software. The terms and conditions of your agreement with us regarding the software or services provided by us, which is the subject of the documentation contained herein, govern this document or content. All company, organization, person, and event references are fictional. Any resemblance to actual companies, organizations, persons, and events is entirely coincidental.

Links to Other Materials: The linked sites and embedded links are not under the control of UKG. We reserve the right to terminate any link or linking program at any time. UKG does not endorse companies or products to which it links. If you decide to access any of the third-party sites linked to the site, you do so entirely at your own risk.