Last updated:
At a customer, I encountered an interesting issue with FIDO2 redirection in a Citrix environment.
The symptoms:
✅ FIDO2 authentication works in the browser.
❌ Microsoft Teams and OneDrive do not recognize the FIDO2 key.
The Citrix session itself works normally, and FIDO2 redirection initially appears to be configured correctly.
After some troubleshooting, I found two interesting fixed issues in the Citrix documentation:
🔹 CVADHELP-29179: FIDO2 works only in browser sessions, not in Office 365 applications.
🔹 CVADHELP-29040: FIDO2 does not work with Edge WebView2 by default.
The solution:
Update to Citrix VDA 2402 LTSR CU4.
Afterwards, FIDO2 authentication also worked in Teams and OneDrive.
💡 My learning:
When FIDO2 works in the browser but not in Microsoft 365 applications, the cause does not have to be Entra ID, the security key or Citrix policies.
Sometimes the solution is already listed in the fixed issues for a Citrix cumulative update. 😉
