Citrix Storefront – Adventures in customization – Dynamically configure features based on group membership

Citrix Storefront – Adventures in customization – Dynamically configure features based on group membership

/ /
in Blog

As per my previous posts, dynamically configure Workspace Control and Authentication based on group membership, this post will put them all together and provide a little GUI love to enable showing your options.  These two features need to be enabled and configured at different times.  The authentication choice needs to be in place before you logon.  Workspace Control is configured upon logon.

In order to ‘cheat’, authentication actually uses Windows authentication from your browser to the server-side script.  This way we can get your account and query your authentication feature group membership.  This won’t work with non-domain machines or browsers that don’t support Windows authentication (Safari?).  But this is OK.  For those caveats, we just redirect those users to the explicit logon page anyways, since their user account won’t be domain-aware.

If you get explicit logon, and then log in, we query the users entitlements for Workspace Control and configure accordingly.  This allows a much more dynamic method than the authentication feature.  By doing Workspace Control configuration after logon we can configure the settings to whichever user you use to logon.  So if my account is Explicit Logon, Workspace Control Disabled that’s what I get after the Storefront logon screen.  However, if I logon with one of my test accounts that has Workspace Control Enabled then it’s enabled when I hit the app list.  Even though my local user account and my Storefront logon are different I’ll get the features of the user that logged in to Storefront.  I think that’s pretty damn neat.

Ok, so let’s get to my finished product.

I edited the custom\style.css file and added the following:

And my completed ‘custom\script.js‘ file:

You’ll need to refer to my previous two posts for the Powershell HTTP LDAP listener and the Group-Membership.aspx file.

What does this look like for an end result?


And if you are a member of the various combinations of groups?


I have to admit, this was a LOT easier than I thought it would be.  Storefront is really powerful and easy to use.  My biggest complaint is the documentation is lacking on how to use the API’s but searching the Citrix support forums proved very fruitful (especially for how to use the authentication methods) for examples.  Hopefully these blog articles will help someone else and further demonstrate the power, flexibility and extensibility of the Citrix Storefront product.

One Comment

  1. Pingback: StoreFront 3.5 through 3.9 – Tweaks – Carl Stalhood

Post a Comment

Your email address will not be published. Required fields are marked *


This site uses Akismet to reduce spam. Learn how your comment data is processed.