- Disable ICA Only (Means enabling Smart Access)
- Open NS Gateway > Policies > Select Policy > Edit Profile > Security > Advanced Settings > Groups Allowed To Login
https://support.citrix.com/article/CTX111079
https://support.citrix.com/article/CTX111079