Modify Custom Login Page. Vasco Digipass Authentication for Citrix Web Interface

Post-Installation Tasks

4.1.1.1

Challenge Flash Applet

This applet is only required if your company is using Digipass which have an optical challenge reader, and you wish to utilize this functionality.

1.

Copy <install directory>\change_password\CWI_<Citrix version>\flash.class

to <citrix directory>.

2.

Remove commenting (the greyed-out lines in the example below) for the applet code in the login page <citrix directory>\include\<login page> .

To edit the file, right-click on it and select Edit from the menu.

CWI 4.x

<!-- This part adds the FLASH challenge. -->

<!-- commented out by default

<tr>

<td>

<table border="0" cellspacing="0" cellpadding="3">

<tr>

<td align='left' valign='top' nowrap>

</td>

</tr>

<tr>

<td valign='top'>

<%= VascoFlash %>

</td>

</tr>

</table>

</td>

</tr>

-->

3.

Save the file and close.

4.

Using the IIS Management Console, check that permissions for the <citrix directory>\flash.class file allow read access.

Modify Custom Login Page

If you have a current login page in use which differs from the standard Citrix login page, you may need to modify it rather than replacing it with the login page provided with the IIS 6 Module.

When the IIS 6 Module detects a request for the login page, it adds three headers to the request before passing it on. The headers added are:

Table 4 - Headers added to login request string

Header

VASCO-Challenge

VASCO-State

VASCO-FlashCode

Explanation

Contains the string challenge to be displayed to the user. ie "1234"

Contains data that needs to be passed as the field "DPExtState" on the login request.

Contains the html code needed to include the challenge flash applet in the login page.

This requires the applet be copied to the appropriate location in the website.

Digipass Authentication for Citrix Web Interface Guide 57

Post-Installation Tasks

A piece of code must be inserted into the login page to include 1-step Challenge/Response functionality. The code required can be found below or taken directly from the login page added to the <install directory>\change_password\CWI_<Citrix version>\ directory during installation.

CWI 4.x

<!-- Digipass Authentication for Citrix Web Interface modifications : START -->

<!-- The following code is for 1-step challenge/response. If you -->

<!-- want the flash applet as well as the text challenge, un- -->

<!-- comment out the section marked FLASH. -->

<% string VascoChallenge = Request.ServerVariables["HTTP_VASCO_CHALLENGE"]; string VascoFlash = Request.ServerVariables["HTTP_VASCO_FLASHCODE"]; string VascoState = Request.ServerVariables["HTTP_VASCO_STATE"]; if (VascoState != null) {

%>

<!-- This part adds the text challenge. -->

<tr>

<td>

<table border="0" cellspacing="0" cellpadding="3">

<tr>

<td align='left' valign='top' nowrap>

<label id='lblVascoChallenge' class='xsNorm' for='fldVascoChallenge' title="Digipass Challenge">

Challenge:

</label>

</td>

</tr>

<tr>

<td valign='top'>

<input type='text' name='fldVascoChallenge' id='fldVascoChallenge'

class='loginEntries' value='<%= VascoChallenge %>'

maxlength='<%=LOGIN_ENTRY_MAX_LENGTH%>' readonly='true'>

</td>

</tr>

</table>

</td>

</tr>

<!-- This part adds the FLASH challenge. -->

<!-- commented out by default

<tr>

<td>

<table border="0" cellspacing="0" cellpadding="3">

<tr>

<td align='left' valign='top' nowrap>

</td>

</tr>

<tr>

<td valign='top'>

<%= VascoFlash %>

Digipass Authentication for Citrix Web Interface Guide 58