Saml, MFA policy design, AD security-group entitlement models, Delivery Groups, Citrix Cloud DaaS, authentication policy configuration, NetScaler ADC, Storefront, Citrix Gateway, virtualizing legacy thick-client ERP applications, VDA build and image management, Citrix engineering, multi-session Windows Server, OIDC federation, IAM exposure, IdP OKTA, Workspace seamless application publishing