Modify a Web Interface 5.3 Site to Authenticate at the Access Gateway when Originally Created to Authenticate at the Web Interface

Recently I was required to test some WI 5.3 customization from the external Interface through AGEE.

While configuring the external access I realized that the Authentication type of the WI was actually set to "at Web interface" whereas I wanted it as "at Access Gateway". Since site was already created and we have had made several media and configuration changes to get the desired look & feel I couldn't afford making a new site again.


Following configuration changes saved my time:

1. Close the Web Interface admin console.

2. Open up the bootstrap.conf file (located at c:\inetpub\wwwroot\citrix\\conf) of the site and add the following entries into it (replacing the existing AuthenticationPoint setting):

AGAuthServiceURL = https://agserver/CitrixAuthService/AuthService.asmx

AuthenticationPoint = AccessGateway

3. Set the following entries in WebInterface.conf (located at c:\inetpub\wwwroot\citrix\%siteroot%\conf):

AGEWebServiceURL = https://agserver/CitrixAuthService/AuthService.asmx

AuthenticationPoint = AccessGateway

4. Apart from this I was also required to overwrite the below code under "AccountSelfServiceUrl" in the webinterface.conf file at C:\Inetpub\wwwroot\Citrix\%site%\conf

AGEPromptPassword=Off

AGEWebServiceURL=https://FQDN/CitrixAuthService/AuthService.asmx

AGAuthenticationMethod=Explicit

5. Save the files and re-open the Web Interface console.