[THIN] Re: Selective display of apps on WI w/ 2 factor

The problem with a silo is that applications are tied to user accounts.
So if a user account has access to application A, then he will see it no
matter what WI he logs into.
 
The other problem is, that to create 2 silos, I interpret that to mean 2
farms, which means purchasing multiple MF licenses since my
understanding is licenses do not cross farm boundaries.
 
-dave
 

David Payne
Xcedex
(o) 612.251.1382
(tf) (866)XCEDEX7
dpayne@xxxxxxxxxx

"Go Virtual, Go Xcedex"

 

  _____  

From: Luchette, Jon [mailto:JLuchette@xxxxxxxxxxxxxxx] 
Sent: Wednesday, June 30, 2004 9:13 AM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Selective display of apps on WI w/ 2 factor



Whoa, I just thought I was at a Citrix Certification exam after that
one...

 

I don't know of any way to be that selective with WI, there very well
might be a way, but if so, I don't know what it is.  Have you thought
about using Virtualization software on your MF box like Microsoft
virtual pc/server.  That way you could build two MF boxes on one piece
of hardware, silo out the standard apps on one MF box and present them
to one WI box, and silo out the sensitive app to the other server and
present it to the other WI server?  Just an idea...

 

/jL

 

-----Original Message-----
From: David Payne [mailto:DPayne@xxxxxxxxxx] 
Sent: Wednesday, June 30, 2004 10:01 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Selective display of apps on WI w/ 2 factor

 

 

Here's an interesting challenge.

 

Client environment is 1 - MF XPs with 1 WI/CSG.  They have an app that
needs 2 factor authentication to comply with security reqs.    But they
have other apps that don't require 2 factor.  They are using RSA for 2
factor with WI/CSG.  Being that they are cost sensitive, they want to
keep only 1 MF server and allow both standard logons for normal apps,
and 2 factor logons for the sensitive app.

 

The trick is, how can we allow both types of logons and still restrict
access to the sensitive app to 2-factor only?  The 2-factor option is
universal in WI, on or off.  So we thought about having two WIs, one
with normal logons and another with 2-factor enabled.  But users will
still be able to access the sensitive app from either WI.

 

Any ideas on how to be selective about which apps show up in WI?

 

Thanks,

 

-dave

 

 

 

David Payne
Xcedex
(o) 612.251.1382
(tf) (866)XCEDEX7
dpayne@xxxxxxxxxx

"Go Virtual, Go Xcedex"

Other related posts: