Configure a JWT Authenticator in Horizon Console

Starting with Horizon 2603, JWT Authenticator configuration is accessible from Settings > Global Settings > Authenticators in the Horizon Console, consistent with the location used for SAML authenticators. This consolidation provides a single location for managing all authentication methods.

You associate a Horizon JWT authenticator with a Connection Server instance. If your deployment includes more than one Connection Server instance, you must associate a separate JWT authenticator with each instance, or use the Enable for all Connection Servers option to apply the authenticator across all Connection Servers in the pod

Procedure

Managing Horizon JWT Authenticators

You can add, edit, enable, disable, and remove Horizon JWT Authenticators from Settings > Global Settings > Authenticators in the Horizon Console

Add a Horizon JWT Authenticator

1. In Horizon Console, navigate to Settings > Global Settings.
2. Select the Authenticators tab.
3. Click Add and select Add Horizon JWT Authenticator from the drop-down menu
4. In the Add Horizon JWT Authenticator window, provide the following information:

5. Click OK to save

Edit or Enable/Disable a Horizon JWT Authenticator

1. In Horizon Console, navigate to Settings > Global Settings.
2. Select the Authenticators tab.
3. Select the Horizon JWT Authenticator that you want to edit.
4. Click Edit.
5. Modify the required fields as needed.
6. Enable the Enable for all Connection Servers toggle, or
7. Select the individual Connection Servers to which you want to apply the authenticator after saving the changes from the main Authenticators tab.
8. Click OK to save your changes.

Note: The steps above are based on the new Global Settings location. If your environment is running a version earlier than Horizon 2603, refer to the previously published procedures for managing JWT authenticators from Settings > Servers > Connection Servers > Edit > Authentication tab

Delete a Horizon JWT Authenticator

1. In Horizon Console, navigate to Settings > Global Settings.
2. Select the Authenticators tab.
3. Select the Horizon JWT Authenticator you want to remove.
4. Click Delete.
5. Click Delete to confirm.

Note: Attempting to delete a JWT authenticator is not permitted if it is enabled on the selected connection server and removal fails if it is enabled on any of the other connection servers in the same cluster. Instead, an administrator must first disable the JWT authenticator on each of the connection servers, then delete them.