In a typical Desktops-as-a-Service environment, applications and desktops are securely delivered to the end user by leveraging Citrix NetScaler Gateway technology. To avoid allowing any Active Directory user account can login to the NetScaler Gateway, configuring LDAP search filters are a common practice to include only users with a specific group membership.
Using CloudPortal Services Manager and Hosted Apps and Desktops Resources provides a simple method to manage and provision logon access to NetScaler Gateway for service providers through a single control plane, without the requirement to touch Active Directory manually.
Here are the steps to activate this:
Create Hosted-Apps-and-Desktops Resource in CPSM
In the CloudPortal Services Manager Web Portal, navigate to Services -> Hosted Apps and Desktops -> Offering Management and then to the Resources tab. Click on New.
Read the entire article here, CloudPortal Services Manager: Control NetScaler Gateway access with HAaD Resources
via the fine folks at Citrix Systems, Inc.