In a non-domain-joined StoreFront deployment, authentication occurs at which component?

• A. Domain Controller
• B. Citrix ADC
• C. Delivery Controller
• D. Cloud Connector

Answer: (C)

In a non-domain-joined StoreFront setup, authentication is handled by the Delivery Controller. StoreFront simply passes the user’s credentials to the Delivery Controller, which acts as the broker and validates them against its configured identity source (such as local Windows accounts or another external store the Delivery Controller is configured to use). Since there’s no Domain Controller to rely on for AD-based authentication, the Delivery Controller is responsible for authenticating the user and then presenting the appropriate published apps and desktops. The Citrix ADC can provide pre-authentication and external access, but it doesn’t perform the actual brokered authentication in this scenario, and Cloud Connector is for Citrix Cloud management rather than on‑prem authentication.