Which policy must a Citrix Administrator modify on the NetScaler to allow mobile devices to connect to a XenDesktop environment where two-factor authentication is NOT used?

LDAP policies on NetScaler are authentication action policies used to define how credentials are validated against an LDAP directory; they do not control client-type or device connectivity settings.

NetScaler Gateway Session policies define the access profile for connecting clients, including ICA proxy settings, client types (receiver, web, mobile), and whether smart-access or clientless access is used. To permit mobile devices, the administrator modifies or creates a Session policy bound to the appropriate virtual server with settings that allow receiver-based or mobile-client connections. The Session policy - not the authentication policy - governs how and what type of client can establish the session.

Authentication policies control which authentication methods (LDAP, RADIUS, certificate, etc.) are required; since two-factor authentication is not in use here, this policy is not the one that needs to change for mobile device access.

Traffic Domains are a network segmentation feature on NetScaler that isolates routing and switching contexts; they are unrelated to controlling which client devices can connect to a XenDesktop environment.