October 2026Citrix MFA update - Security hardening 29.10

Unit4 will be introducing mandatory Multi-Factor Authentication (MFA) for access to the Unit4 Citrix platform. This change is part of our continued security enhancement program and will provide an additional layer of protection beyond a username and password.

What is changing? 

Currently, users can access the Unit4 Citrix platform using a username and password and have the option to use Multi-Factor Authentication (MFA) as an additional authentication step. Following this change, MFA will become mandatory, and all users will be required to verify their identity using a one-time verification code sent to their registered email address each time they log in.

If your organization is already using MFA for Citrix access, no action is required and this change will not impact your users, as they are already authenticating using MFA.

When is this change effective? 

MFA will become mandatory for your Citrix environment on:

  • 29 October 2026 at 06:00 UTC

What do we ask you to do now? 

To help ensure a smooth transition, we kindly ask you to:

  • Inform your Citrix users that an additional verification step will soon be required when logging in.
  • Verify that users have valid and up-to-date email addresses associated with their Citrix accounts.
  • Review any email filtering, spam filtering or allow-listing policies to ensure MFA verification emails can be received successfully.
  • Review the following Knowledge Article, which explains how users and administrators can manage account details through the Citrix Management Portal, including verifying and updating email addresses: KB0048477 
  • Consider testing MFA in advance using your Citrix administration and self-service capabilities where available.

What should users expect? 

After MFA enforcement is enabled, users will:

  1. Log in to Citrix using their existing credentials.
  2. Receive a one-time verification code via email.
  3. Enter the verification code to complete the sign-in process.
May 2025Unit4 have announced an upcoming security enhancement:

Multi-Factor Authentication (MFA) will be made available for regular users accessing Unit4 Cloud services via Citrix, starting May 13, 2025.

This feature is optional and can be enabled at your organisation’s discretion. Citrix access will continue to function as it does today unless your designated Citrix administrator chooses to apply the policy to users.

Full setup instructions and supporting documentation for Citrix administrators will be shared closer to the go-live date to support a smooth implementation for those who choose to enable it.

FAQs

This is part of our ongoing commitment to enhance security across our cloud services. MFA adds a second layer of authentication, reducing the risk of unauthorised access, especially for users accessing Citrix-based environments.

No. MFA is optional and fully self-managed. Citrix access will continue to function as it does today unless your organisation chooses to enable MFA for selected users.

Email-based one-time passcodes (OTP) offer a secure and universally accessible method that does not require additional devices or app installations. It’s simple to deploy and use, especially in environments where mobile access is restricted or unavailable.

Your organisation’s designated SuperUser(s) can decide whether to enable MFA for regular Citrix users. Unit4 provides documentation to guide them through the process.

Yes. MFA is fully configurable at the organizational level. SuperUsers can enable it selectively based on your internal security policies and user roles.

Please ensure the user’s email address is correct and accessible. We recommend verifying email records in advance. If issues persist, contact your internal administrator or Unit4 support for assistance.

Why choose us?

We are an Elite Unit4 Partner
We provide solutions, services, and support across the extensive Unit4 product suite and are experts in delivering transformation.

Talk to our experts