Free SMS 2-Factor Token for Citrix Web Interface 5.4

15 Shares

There are many SMS 2-factor solutions for Citrix Web Interface, but only one of them are free. This awesome add on has been created by Claus Isager and there exist many blog posts dating back to 2007. Since then many things have change e.g. the release of Citrix Web Interface 5.4 and the fact that more and more companies are running Windows 2008 R2.

So in this blog post we’ll show you how to install and configure this solution for the x64 platform. First you need to download the source files from Claus Isager web site and make sure you have .NET Framework 3.5 on the domain controller(s) you want to use to manage this SMS 2-factor solution.

Copy the following files below into C:\Program Files (x86)\SMSToken

[sourcecode language=”plain”]
<pre>C:\Windows\winsxs\msil_mmcfxcommon_31bf3856ad364e35_6.1.7600.16385_none_523dc6fcd93e7961\MMCFxCommon.dll
C:\Windows\winsxs\msil_microsoft.managementconsole_31bf3856ad364e35_6.1.7600.16385_none_3e39b04275a2b575\Microsoft.ManagementConsole.dll
C:\Windows\winsxs\amd64_installutil_b03f5f7f11d50a3a_6.1.7601.17514_none_0826be6cc9481df4\InstallUtil.exe
SMSToken.dll from the SmsToken_AD64.zip
[/sourcecode]

From CMD run the following command : InstallUtil.exe SMSToken.dll

Open Active Directory Users and Computers and check that you’ve got the SMS Token tab as show in the first image. This is not an Active Directory Schema extension so don’t worry. At the same time set a pin code for your test user and select if you want to use Flash or Normal SMS delivery. Also make sure you add a phone number in the Telephone Number field with the format +47xxxxxxxx.

Head over to Clickatell and create a free account. Make sure you select Central API. Even tough the sign up is free you need to buy at least 400 credits for $23.36.

When you’re finished with the registration and the validation process you’ll need to create a HTTP API Connection. Note down the details because you need those later.

From your Citrix Web Interface 5.4 server create a test site and set Authentication Methods – Properties – Two-Factor Authentication to Safeword.

Navigate to <yoursite>\app_code\PagesJava\com\citrix\wi\pages\auth\twofactor\ and make a backup copy of the files NextTokenCode.java and ChangePinUser.java to C:\Temp (Cannot be the same folder).

From the sms5254email.zip copy all the 3 java files and replace the current files in this folder. Then do the following :

  1. Copy smscode.dll to <yoursite>\bin
  2. Copy smscode.aspx to <yoursite>\auth
  3. Copy smscode.conf to the <your site>\conf
  4. Edit smscode.conf with your API information
  5. Edit webinterface.conf
  6. Replace the line in Webinterface.conf AdditionalExplicitAuthentication=Safeword with
    AdditionalExplicitAuthentication=smscode

The final step is to change the IIS Application Pools – Advanced – Identity to NetWorkService and then finally restart the IIS Server.

Resources :

Happy Go Lucky! There’s also documentation in the source files, but it was missing information related to Citrix Web Interface 5.4 and Active Directory on Windows 2008 R2. If you have any topics you want us to blog about, just drop a comment below.

I blew $23.36 on this blog post so it would be cool if you shared this post with others by Clicking on the Social Icons below.

15 Shares

8 Responses to Free SMS 2-Factor Token for Citrix Web Interface 5.4

  1. PhoneFactor offers free phone based authentication for up to 25 users. It is a very nifty solution with lots of nice features.

  2. Hi
    I have had a lot of request for SMS Token to support CAG, so I made a solution that will work with CAG.
    The current version does not support pin’s and is only tested on a limited scale. I only have access to a Netscaler VPX. 🙁

  3. Testing this solution and seems good, however, the PASSCODE field that now comes on the CSG doesnt seem to do anything? I can type whatever I like there and I will still get to the token page where I enter the recived token on SMS. Bug? CSG 5.4

Leave a reply