Which statement about authentication in a non-domain-joined StoreFront deployment is correct?

Which statement about authentication in a non-domain-joined StoreFront deployment is correct?

• A. Authentication occurs at the Domain Controller
• B. Two-factor authentication is not supported
• C. Authentication occurs at the Delivery Controller
• D. Authentication occurs at the Citrix ADC

Answer: (C)

In a non-domain-joined StoreFront deployment, there is no Domain Controller to handle Windows-domain authentication. The component responsible for validating user credentials and granting access is the Delivery Controller. When users sign in to StoreFront, their credentials are authenticated by the Delivery Controller against the configured identity stores (such as LDAP/AD via the Delivery Controller or other identity providers). The Citrix ADC can be involved in pre-authentication or SSO flows for remote access, but it doesn’t perform the primary authentication for StoreFront in this scenario. Also, two-factor authentication can be supported through integrations with identity providers or Citrix Gateway, so the statement that 2FA isn’t supported isn’t accurate.

In a non-domain-joined StoreFront deployment, there is no Domain Controller to handle Windows-domain authentication. The component responsible for validating user credentials and granting access is the Delivery Controller. When users sign in to StoreFront, their credentials are authenticated by the Delivery Controller against the configured identity stores (such as LDAP/AD via the Delivery Controller or other identity providers). The Citrix ADC can be involved in pre-authentication or SSO flows for remote access, but it doesn’t perform the primary authentication for StoreFront in this scenario. Also, two-factor authentication can be supported through integrations with identity providers or Citrix Gateway, so the statement that 2FA isn’t supported isn’t accurate.