Configuring Local Users

Last published : Sep 03, 2026
You can create user accounts locally on NetScaler Gateway to supplement the users on authentication servers. For example, you might want to create local user accounts for temporary users, such as consultants or visitors, without creating an entry for those users on the authentication server.
If you are using local authentication, create users and then add them to groups that you create on NetScaler Gateway. After configuring users and groups, you can apply authorization and session policies, create bookmarks, specify applications, and specify the IP address of file shares and servers to which users have access.
Related information
Authentication and Authorization

To create local users

  1. In the configuration utility, click the Configuration tab and in the navigation pane, expand NetScaler Gateway > User Administration, and then click AAA Users.
  2. In the details pane, click Add.
  3. In User Name, type the user name.
  4. If you are using local authentication, clear External Authentication. Note: Select External Authentication to have users authenticate against an external authentication server, such as LDAP or RADIUS. Clear the check box to have NetScaler Gateway authenticate against the local user database.
  5. In Password and Confirm Password, type the password for the user, click Create, and then click Close.

To change a user password

After creating a local user, you can change the user’s password or configure the user account to be authenticated against an external authentication server.
  1. In the configuration utility, click the Configuration tab and in the navigation pane, expand NetScaler Gateway > User Administration, and then click AAA Users.
  2. In the details pane, select a user and then click Open.
  3. In Password and Confirm Password, type the new password for the user, and then click OK.

To change a user’s authentication method

If you have users who are configured for local authentication, you can change the authentication to an external authentication server. To do this, enable external authentication.
  1. In the configuration utility, click the Configuration tab and in the navigation pane, expand NetScaler Gateway > User Administration, and then click AAA Users.
  2. In the details pane, select a user and then click Open.
  3. Select External Authentication, and then click OK.

To remove a user

You can also remove a user from NetScaler Gateway.
  1. In the configuration utility, click the Configuration tab and in the navigation pane, expand NetScaler Gateway > User Administration, and then click AAA Users.
  2. In the details pane, select a user, and then click Remove.
When you remove a user from NetScaler Gateway, all associated policies are also removed from the user profile.