Support for Single Sign-on Support with Citrix Gateway
Single Sign-on lets you authenticate to a domain and use Citrix Virtual Apps and Desktops delivered by that domain without having to re-authenticate to each app or desktop. When you add a store using the Storebrowse utility, your credentials are passed through to Citrix Gateway server, along with the Citrix Virtual Apps and Desktops enumerated for you, including your Start menu settings. After configuring Single Sign-on, you can add the store, enumerate the Citrix Virtual Apps and Desktops, launch the required resource without having to type your credentials multiple times.
This feature is supported on Citrix Gateway Version 11 and later.
For the prerequisites on how to configure Single Sign-On for Citrix Gateway, see Configure domain pass-through authentication.
The Single Sign-On feature with Citrix Gateway can be enabled using the Group Policy Object (GPO) administrative template.
When you upgrade from Citrix Receiver to Citrix Workspace app or fresh install Citrix Workspace app for the first time, you must add the latest template files to the local GPO. For more information on adding template files to the local GPO, see Configuring Group Policy Object administrative template. In case of an upgrade, the existing settings are retained when the latest files are imported.
- Open the Citrix Workspace app GPO administrative template by running gpedit.msc
- Under the Computer Configuration node, go to Administrative Template > Citrix Component > Citrix Workspace > User Authentication > Single Sign-on for Citrix Gateway.
- Use the toggle options to Enable or Disable the Single Sign-On option.
- Click Apply and OK.
- Restart the Citrix Workspace app session for the changes to take effect.