Setup a resource location
1. Log into Citrix Cloud
2. Go to where it says Resource Locations and select Edit or Add New.
You will now see a Resource Location with the default name 'My Resource Location'
3. If you wish to rename this you can click on the ellipsis icon on the top right and select rename:
Type in the new name of your Resource location and click Save
Alternatively (if you already have existing Resource Locations), you can click on + Resource Location at the top.
Add a Cloud Connector
The Citrix Cloud Connector is a Citrix component that serves as a channel for communication between Citrix Cloud and your resource locations, enabling cloud management without requiring any complex networking or infrastructure configuration. This removes all the hassle of managing delivery infrastructure. In my infrastructure, the Citrix cloud connector will add my on-premise Active Directory and Virtual Apps and Desktop Delivery controller to the Citrix Cloud.
1. Locate your Resource Location and click on + Cloud Connectors
2. On the Add a Cloud Connector window click on Download
3. The following file will be downloaded… 
4. Install the Cloud Connector on a dedicated machine running Windows Server 2012 R2, Windows Server 2016, or Windows Server 2019. This machine must be joined to your domain and able to communicate with the resources that you want to manage from Citrix Cloud.
Do not install the Cloud Connector, or any other Citrix components, on an Active Directory domain controller.
Do not install the Cloud Connector on machines that are part of other Citrix deployments (for example, Delivery Controllers in a Virtual Apps and Desktops deployment).
• If you get the following error You will need to click on the link contained in the message to download and install .NET Framework 4.7.2 first
5. Click on Sign in
This will call up the Citrix Cloud SSO API in which you enter your Citrix Cloud logon credentials.
6. Select the Resource Location you create on Citrix Cloud, earlier….
7. Click on Install
This will take some time so you need to be patient!
Once successful connection has been established you will see this…
8. Go back to the Resource Locations on Citrix Cloud. You will now see a cloud connector has been established on your resource location…
9. Click on Cloud Connectors. This will display the FQDN of the server you have installed the connector onto…
10. To maintain high availability, it is recommended to install two connectors on domain member servers. To install another connector, please follow steps 2 – 9 again.
11. Once completed Exit out of Resource Locations
12. Click on the menu icon on the top left.
13. Select Identity and Access Management from the drop-down menu, that appears:
Once in you will see that Your Active directory is connected using the connectors you have installed.
14. You can check it is the correct domain by clicking on the ellipses (...) icon on the end and selecting Manage Domains…
Workspace Configuration
As the main purpose of this guide is to demonstrate 2-factor authentication via SAML I will assume you already know how to set up your own work space configuration. Therefore I am going to skim over this bit, apart from to say, because I have already set up VDAs on-premise in preparation for the wiki guide on ADC integration with Virtual Apps and Desktops I have therefore configured my workspace to connect to my on-premise resource.
For information on how to set up your own configuration please go to the following website, https://docs.citrix.com/en-us/citrix-workspace/configure.html or contact Citrix support.