Category Archives: Pii

Apple FaceID Authentication for Citrix Workspace app on iOS Devices

I recently moved from iPhone 5S (Ja Ja or Yes Yes) to iPhone XR and thought I’d enable Apple FaceID as my primary authentication method for my corporate owned device vs. PIN/Passcode and … to unlock my device + Citrix Workspace.

I have to say I’m impressed thus far it’s a really super authentication method and defiantly not a gimmick! Example I setup notifications for Citrix Secure Mail with the Show Previews set to “When Unlocked (Default)” this means that when an unknown vs. family individual picks up my iPhone they’ll see a Secure Mail badge with just “Notification” as the message see below.

However when I pick up the iPhone I see something quiet different, as you’ll notice below. I now very quickly get the right vs. relevant context surrounding the email(s) content sent, therefore I am better informed to decide when to respond e.g right now, in a few minutes or later dependant upon the activity/task that I am busy with, within my current Citrix Workplace setting e.g Citrix Paddington office, London tube vs. bus, Train up north to Manchester e.t.c as at Citrix it’s recognised that work is not a place anymore.

Workplace setting? What’s that? 

Think about yourself, you’re probably consuming  1-2 LOB apps at least 2-3 times before arriving in your first workplace setting for the day for a meeting or attending an event? Take note you’ve already signed into WORK at what 06:00-30 if you have children or perhaps later. Did this behaviour exist 5 years ago for you?

Ok back to Apples FaceID.

I wanted to truly test, push the limits and capabilities of Apple FaceID as a primary authentication method for my Citrix Workspace + Workplaces going beyond what we all test it seems e.g different coloured lighting, in the dark, twilight, dusk, low vs. bright light and the list goes on and it all worked perfectly so great job Apple so far!

I wanted more, I wanted a sudden change in my face to truly push FaceID to its limits so as many men do in November I to pulled a Movember – (perfectly timed) so I had a thickish but full beard + moustache which was timely for me testing its limits so I registered my face with both (yes it was passing the scratchy stage) so I then decided to leave it post Movember for 3 days to see if it was learning more about my face to better recognise me and then implement the dramatic change by shaving it all off clean and what do you think happened? Did Apple FaceID recognise me? Yes it did first time, great job again Apple!

So can you be confident in consuming FaceID for Citrix Workspace app or even for unlocking your iOS devices? Yes, if it’s a supported feature on your iOS device and obviously if your corporate IT policy allows for it by not blocking it through policy controls.

How-to Enable FaceID for Citrix Workspace app on iOS
Authenticate yourself within Citrix Workspace app for iOS e.g – using your current method e.g TouchID and or user/passwd/token e.t.c and then to enable it Apple FaceID navigate to the settings “Menu” tap your desired configured account or the default which is “Store”, next tap “Edit Account” and finally toggle the “FaceID” option to the ON or ENABLED position/state and then you are ready to begin consuming Apple FaceID as your primary authentication method to Citrix Workspace app on iOS.

Final Thoughts
I was not a fan of Apple FaceID initially when it launched as I wanted to do some homework + research it a bit more and see and hear what other peoples experiences where, but most of all wait for the technology to mature a little.

One thing I do keeping thinking about is that Apple FaceID lets you add up to 2x faces only on the iPhone XR*. I wonder if it needs to support up to 4x for family vs. 1x for business scenarios controlled by MDM/UEM polices?

I will continue my testing over time and circle back in a few months with a new blog post of simply update this and do more background research on Apple FaceID* but until then enjoy it, its worth enabling!

The views expressed here are my own and do not necessarily reflect the views of Citrix or Apple.

Now who is ready for that 4 lettered Elephant?

The views expressed here are my own and do not necessarily reflect the views of Citrix.

GOOD LUCK Everyone!

Now who is ready for ready for that 4 lettered Elephant? Its 4 more sleeps as my youngest would say, Citrix have a microsite at – where you can start with Readiness activities or if you don’t have the time start by reading – however you CANNOT achieve readiness in 4 sleeps at this point in time, so please don’t push nor rush IT + Compliance teams at this point as this will naturally lead to mistakes that are overlooked vs. misunderstood vs. misinterpreted and will likely be continually missed moving forwards as the documentation around your readiness has been completed, that is until a #security indecent occurs like #mailware infection or a #hack that breaches your organisation and then compromises the #Pii of your employees, customers and 3rd parties.

It is never to late to start your Readiness activities however you will need to accept that you most likely will not be ready come the 25 May 2018 at this point. If you need help & support just ask your #Citrix representative or one of our Partners.

I originally posted the above on my LinkedIn feed on 21/05/2018 here –, including that even WordPress’s latest release allows for removal of “Personal Data” as a feature check it out – so if you blog using WordPress like I do i’d suggest that you perform this update :-).

Finally I am not Data, Privacy nor Compliance Practitioner or Officer so this blog serves as awareness only, so please please please if you are serious and want help and you prefer to remain anonymous even to trusted Citrix Partners about your Readiness status then I would strongly urge you and your organisation if your within the United Kingdom to please visit the Information Commissioner’s Office (ICO) website on the topic at – to get started today or visit the EU website for organisations outside of the UK but in the EU or global organisations outside of the EU for guidance – or

The views expressed here are my own and do not necessarily reflect the views of Citrix.