Merge pull request #8690 from ErikjeMS/win365citrix

41294492 citrix

Author: Angela Fleischmann

windows-365/enterprise/TOC.yml

@@ -89,6 +89,12 @@ items:
         items:
         - name: Set up tenants for Windows 365 Government
           href: set-up-tenants-windows-365-gcc.md
+      - name: Citrix HDX Plus for Windows 365
+        items:
+        - name: Requirements
+          href: requirements-citrix.md
+        - name: Set up Citrix HDX Plus for Windows 365
+          href: set-up-citrix.md
     - name: Provisioning
       items:
       - name: Create and assign provisioning policy

windows-365/enterprise/media/set-up-citrix/connectors-tokens.png

@@ -0,0 +1,85 @@
+---
+# required metadata
+title: Requirements to set up Citrix HDX Plus for Windows 365 Enterprise
+titleSuffix:
+description: Learn about requirements for using Citrix HDX Plus with Windows 365 Enterprise.
+keywords:
+author: ErikjeMS  
+ms.author: erikje
+manager: dougeby
+ms.date: 10/12/2022
+ms.topic: overview
+ms.service: cloudpc
+ms.subservice:
+ms.localizationpriority: high
+ms.technology:
+ms.assetid: 
+
+# optional metadata
+
+#ROBOTS:
+#audience:
+
+ms.reviewer: aradinger    
+ms.suite: ems
+search.appverid: MET150
+#ms.tgt_pltfrm:
+ms.custom: intune-azure; get-started
+ms.collection: M365-identity-device-management
+---
+
+# Requirements for using Citrix HDX Plus for Windows 365 Enterprise
+
+> [!IMPORTANT]
+> Citrix HDX Plus is currently in tech preview and isn't officially supported by Citrix. To participate in this tech preview, fill out [this form](https://podio.com/webforms/27930591/2190031).
+
+To use Citrix HDX Plus for Windows 365, you must meet the following requirements:
+
+## Citrix requirements
+
+- Citrix Cloud tenant with HDX Plus for Windows 365 entitlement
+  - Citrix HDX Plus for Windows 365
+  - Citrix DaaS Premium
+  - Citrix DaaS Premium Plus
+- Citrix admin account with full admin rights
+- Cloud PCs must have access to:
+  - https://*.*.nssvc.net on TCP 443 and UDP 443 for HDX sessions over TCP and EDT, respectively. If you can’t allow all subdomains in that manner, you can instead use https://*.c.nssvc.net and https://*.g.nssvc.net. For more information, see the [Citrix Support Knowledge Center article CTX270584](https://support.citrix.com/article/CTX270584/citrix-gateway-service-pointsofpresence-pops).
+  - https://*.xendesktop.net on TCP 443. If you can’t allow all subdomains in that manner, you can use https://<customer_ID>.xendesktop.net, where customer_ID is your Citrix Cloud customer ID as shown in the Citrix Cloud administrator portal.
+- For Hybrid Azure Active Directory (Azure AD) joined deployments:
+  - The Azure AD domain must be synchronized from the Azure AD domain that the Cloud PCs belong to.
+  - Cloud Connectors to allow Citrix Cloud to connect to your Active Directory domain. For more information, see [Citrix Cloud Connector](https://docs.citrix.com/en-us/citrix-cloud/citrix-cloud-resource-locations/citrix-cloud-connector.html).
+
+## Microsoft requirements
+
+- Microsoft Endpoint Manager entitlement
+- Azure AD domain in the same tenant as Microsoft Endpoint Manager
+- Windows 365 Enterprise licenses in the same tenant as Microsoft Endpoint Manager
+- Azure admin account:
+  - Azure AD Global Admin
+  - Intune Global Admin
+
+## Supported configurations
+
+Citrix HDX Plus for Windows 365 supports integrating with Windows 365 deployments with for Azure AD joined Cloud PCs and Hybrid Azure AD joined Cloud PCs. The following tables detail the configurations for each scenario.
+
+### Supported infrastructures
+
+| Identity | Citrix Cloud | CVAD (on-prem) | Citrix Workspace | Citrix Storefront | Citrix Gateway Service | Citrix Gateway |
+| --- | --- | --- | --- | --- | --- | --- |
+| Azure AD joined | Yes | No | Yes | No | Yes | No |
+| Hybrid Azure AD joined | Yes | No | Yes | No | Yes | No |
+
+### Supported identity providers
+
+| Identity | Azure AD | Active Directory | Active Directory + Token | Okta | SAML | Citrix Gateway | Adaptive Authentication |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| Azure AD joined | Yes | No | No | No | No | No | No |
+| Hybrid Azure AD joined | Yes | Yes | Yes | Yes | Yes | Yes | Yes |
+
+> [!NOTE]  
+> For Hybrid AD joined deployments, if you're using an IdP other than Active Directory or Active Directory + Token, you'll need Citrix Federated Authentication Service (FAS). If you don't use FAS, you won't be able to use single sign-on (SSO) to the Cloud PC. For more information, see the [FAS documentation](https://docs.citrix.com/en-us/federated-authentication-service).  
+
+<!-- ########################## -->
+## Next steps
+
+[Set up Citrix HDX Plus for Windows 365 Enterprise](set-up-citrix.md).

windows-365/enterprise/media/set-up-citrix/turn-on-connector.png

@@ -0,0 +1,62 @@
+---
+# required metadata
+title: Set up Citrix HDX Plus for Windows 365 Enterprise
+titleSuffix:
+description: Learn about using Citrix HDX Plus with Windows 365 Enterprise.
+keywords:
+author: ErikjeMS  
+ms.author: erikje
+manager: dougeby
+ms.date: 10/12/2022
+ms.topic: overview
+ms.service: cloudpc
+ms.subservice:
+ms.localizationpriority: high
+ms.technology:
+ms.assetid: 
+
+# optional metadata
+
+#ROBOTS:
+#audience:
+
+ms.reviewer: aradinger    
+ms.suite: ems
+search.appverid: MET150
+#ms.tgt_pltfrm:
+ms.custom: intune-azure; get-started
+ms.collection: M365-identity-device-management
+---
+
+# Set up Citrix HDX Plus for Windows 365 Enterprise
+
+> [!IMPORTANT]
+> Citrix HDX Plus is currently in tech preview and isn't officially supported by Citrix. To participate in this tech preview, fill out [this form](https://podio.com/webforms/27930591/2190031).
+
+Citrix HDX Plus for Windows 365 lets you integrate Citrix Cloud with Windows 365. This integration gives you access to Citrix HDX technologies for enhanced Cloud PC security and manageability.
+
+## Set up overview
+
+To set up Citrix HDX Plus for Windows 365 Enterprise, follow these steps. The first two steps are explained here at learn.microsoft.com. The remaining steps are explained on the citrix.com web site.
+
+1. [Fulfill requirements](requirements-citrix.md).
+2. [Turn on the Citrix connector in Intune](#turn-on-the-windows-365-citrix-connector-in-intune).
+3. Connect Azure Active Directory to Citrix Cloud.
+4. Configure Citrix Workspace.
+5. Connect Windows 365 to Citrix Cloud.
+6. Assign Citrix licenses to users.
+7. Provision Cloud PCs.
+
+### Turn on the Windows 365 Citrix connector in Intune
+
+To turn on the Citrix connector, follow these steps:
+
+1. As a Global administrator, sign in to [Microsoft Endpoint Manager admin center](https://go.microsoft.com/fwlink/?linkid=2109431), select **Tenant administration** > **Connectors and tokens**.
+![Screenshot of navigating to Connectors and tokens](./media/set-up-citrix/connectors-tokens.png)
+2. Select **Windows 365 Citrix connector (preview)** > next to **Allow people to use Citrix to connect to their Cloud PCs**, set the toggle to **On**.
+![Screenshot of turning on the connector](./media/set-up-citrix/turn-on-connector.png)
+
+<!-- ########################## -->
+## Next steps
+
+For information about Citrix HDX Plus requirements, see [Requirements](requirements-citrix.md).