To meet a requirement where internal users use corporate credentials and partners use their own directories without replication, which authentication approach is recommended?

• A. Deploy SAML on Citrix ADC in SP role for partners
• B. Create two LDAP and two SAML authentication policies on the AAA server
• C. Configure nFactor authentication with two LDAP advanced policies and one SAML advanced policy
• D. Configure two dedicated AAA virtual servers for internal and partner users

Answer: (C)

nFactor authentication lets you build a single, adaptive login flow that can route users to different identity sources based on who they are or what they provide. In this scenario you need internal users to authenticate with your corporate LDAP and partners to authenticate via their own directories through SAML, without duplicating credentials.

With nFactor, you can configure a flow that includes two LDAP advanced policies and one SAML advanced policy. The flow can determine which path to take—internal users proceed through the LDAP policy against the corporate directory, while partners are directed to the SAML policy that delegates authentication to their IdP. Because each identity source remains separate and no credential replication is involved, you get a seamless, unified login experience that respects each party’s own directory, without building parallel or replicated stores.

This approach is more scalable and manageable than keeping separate SP-based logins for partners or maintaining multiple dedicated AAA virtual servers with split policies, which add complexity without providing the same clean, unified path.