Policy
OAuth Redirection
Citrix Workspace
Policy overview
Key metadata and intent for this policy.
OAuth Redirection allows configuring URL patterns to allow OAuth logins to be redirected over Bidirectional Content Redirection. -OAuth Pattern : This indicates the list of URL regular expressions that, when redirected to the client via Host-to-Client URL redirection, will be tracked as if an OAuth authentication flow has begun, and when the flow completes that resulting URL will be redirected back into the Host VDA that initiated that flow.. Semi Colon ";" acts as a delimeter. -OAuth Scheme : This indicates the scheme of URLs .If a Scheme is specified, the terminating URL is expected to be of the form: scheme://something. If Scheme is not specified (empty), then the original resulting URL pattern is extracted from the Pattern via a regular expression capture group (must be specified in the Pattern). Semi Colon ";" acts as a delimeter. Note: 1)Number of Patterns and scheme entries should match .If no scheme is specified for pattern just porvide ';' for empty scheme 2)OAuth Redirection works only if BidirectionalContentRedirection is enabled
Registry values
How enabled and disabled states update the registry.
| Scope | Registry location | Type | Enabled value | Disabled value | Copy |
|---|---|---|---|---|---|
| User | Path Software\Classes\citrix-oauth-redir Value name URL Protocol | REG_SZ | HKCU | HKCU — | |
| User | Path Software\Policies\Citrix\ICA Client\OAuth Redirection Value name AllowOAuthRedirection | REG_DWORD | HKCU 1 | HKCU 0 |
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
| User | Pattern: ID Part_OAuthRedirectionRedirectionPattern | text | Path Software\Policies\Citrix\ICA Client\OAuth Redirection Value name Pattern Type REG_SZ | None | |
| User | Scheme: ID Part_OAuthRedirectionScheme | text | Path Software\Policies\Citrix\ICA Client\OAuth Redirection Value name Scheme Type REG_SZ | None |