Linux Virtual Delivery Agent

Non-SSO authentication

February 25, 2025

Contributed by:

C B S

This article provides guidance on how to enable non-SSO authentication on the Linux VDA.

Overview

By default, the Linux VDA has single sign-on (SSO) enabled. Users log on to Citrix Workspace app and to VDA sessions using one set of credentials.

To have users log on to VDA sessions using a different set of credentials, disable SSO on the Linux VDA. The following table lists combinations of user authentication methods supported in non-SSO scenarios.

Citrix Workspace app	VDA session
user name	user name
smart card	user name
user name	smart card
FAS	user name
FAS	smart card

Disable SSO

Run the following command on your Linux VDA:

/opt/Citrix/VDA/bin/ctxreg create -k "HKLM\System\CurrentControlSet\Control\Citrix\WinStations\tcp" -t "REG_DWORD" -v "fPromptForDifferentUser" -d "0x00000001" --force
<!--NeedCopy-->

The Linux VDA gives you control over how users log in when not using SSO. You can customize the login experience by choosing which authentication methods are displayed. Previously, the non-SSO login screen always showed both password and smart card authentication in a drop-down list. Now, you can configure the Linux VDA to offer:

Password authentication only
Smart card authentication only
Combination of password and smart card authentication, with either option presented by default

You can customize the login method by adjusting the following registry setting on the VDA:

System\CurrentControlSet\Control\Citrix\login\NSSOLogonType

The NSSOLogonType registry key value controls which login methods are displayed on the Linux VDA login screen for Non-SSO users:

1: Smart card authentication only. Users are required to log in with their smart card.
2: Combination of password and smart card authentication, with password authentication presented by default
3: Combination of password and smart card authentication, with smart card authentication presented by default.
Any other value: Password authentication only. Users log in with their user name and password.

To verify that you’ve correctly configured the customizable login feature on your Linux VDA, follow these steps:

Enable Non-SSO on the VDA using the following command:

/opt/Citrix/VDA/bin/ctxreg create -k "HKLM\System\CurrentControlSet\Control\Citrix\WinStations\tcp" -t "REG_DWORD" -v "fPromptForDifferentUser" -d "0x00000001" --force
<!--NeedCopy-->

Change the default login type using a command similar to the following on the VDA:
```
/opt/Citrix/VDA/bin/ctxreg create -k "HKLM\System\CurrentControlSet\Control\Citrix\login" -t "REG_DWORD" -v "NSSOLogonType" -d "0x00000001" --force

```
As described earlier, setting the NSSOLogonType registry key value to 1 configures the Linux VDA to display only the smart card authentication option on the login screen.
Check the login screen to verify that the drop-down list displays only the smart card authentication you configured.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Non-SSO authentication

February 25, 2025

Contributed by:

C B S

February 25, 2025

Contributed by:

C B S

Non-SSO authentication

Overview

Disable SSO

Customize login screen

In this article