Scenario: A Citrix Engineer needs to provide virtual desktop access to branch office users by deploying NetScaler to an existing Citrix StoreFront environment. Active Directory, along with RSA…

Local authentication uses accounts stored directly on the NetScaler appliance and has no integration with Active Directory or RSA token infrastructure.

LDAP is required to authenticate users against Active Directory, validating their domain username and password as the first authentication factor.

RADIUS is required to validate RSA token passcodes because RSA Authentication Manager exposes token validation through the RADIUS protocol, making it the correct second-factor authentication server type on NetScaler.

TACACS is a Cisco-centric protocol primarily used for device administration and network access control, not for RSA token or Active Directory user authentication in a Citrix environment.