Citrix Web Interface SSO

[Philcol76_]

Hi,

I have recently been tasked with setting Citrix access via our SA4500's as a proof of concept for our new Citrix environment and to prove all the required functionality will work instead of using a Netscaler.

I have successfully setup the Realm so that hostchecker checks if the device is corporate or personal, which works fine.

If the device is managed, they make a NC connection and the Web Interface opens up and everything works fine. The managed devices have Citrix Enterprise reciever installed, with the adm files loaded to enable SSO.

For personal devices, I have setup the 3 different ways of loading Citrix apps as bookmarks to enable the clients to decide how they want to procede:-

Custom ICA - Working

Hosted Apps - Working

Both of these methods launch fine and SSO with no problems.

Web Interface using a Web Application Profile - Shows the applications but when any of them are selected we are just getting a black box in the centre of the screen. Occasionally we do see the Server 2008 sign in page and if we catch it quick enough, we are able to sign in and the application will load. I'm using CTS as we cannot leave a footprint on the end user PC.

How do I get the SA to pass thorough the credentials to the Citrix server?

After a bit of digging I have found references to adding State - state - LOGIN but this hasn't resolved the issue.

I'm also a bit confused re the Resource below Send the following data as a request headers, as when this is populated with the FQDN in the URL the web interface just loops and never shows the apps.

Any help or direction gratefully received.

Juniper SA4500 7.1r13

Web interface version: 5.4

XenApp version: 6.5

Phil

[SVK_]

Hi Phil,

When you say 

"Web Interface using a Web Application Profile - Shows the applications" I assume sso is set properly if not you will not be able to see the published application.

1. Could you attach a screenshot of this configuration?

2. What is the value for Cookie (under single sign-on)

3. What is the version citrrix server?

4. is this a Metaframe/xenapp or a xendesktop?

Regards,

[Philcol76_]

Hi SVK,

Sorry, you are correct, SSO to the WI works and I can see the published applications but when they launch I either get a black screen or occasionally the Server 2008 login screen. I can then login and the app launches fine.

I have attached a screen shot of the SSO and Cookie infomation as you requested.

The version of Citrix are:-

Web interface version: 5.4

XenApp version: 6.5

XenApp Desktop Version: 6.5

Regards

[SVK_]

Try adding only one cookie value and remove all the other values

Cookie = WINGSession=remoteClientDetected=Auto(Ica-Local)&icaClientAvailable=True&icaIsPassThrough=3

Regards,

SVK

[Philcol76_]

Hi SVK,

Unfortunattly this hasn't resolved the issue and I'm still presented with the Server 2008 Login page.

I cannot get my head around how the Hosted TS and custom ICA will open the published apps fine but not WI.

Thanks

Phil

[SVK_]

Hi Phil,

Thats strange,

1. Going direct what is the behaviour?

2. How do the user login to the citrix resource is it domain\username?

Regards,

Vijay Kumar

[Philcol76_]

Hi,

I'm not sure what you mean by going direct. On our corporate machines, the Citrix team have got this working by installing the Citrix Enterprise Receiver and installing the.adm files to get SSO for the applications to work. We can't not want to get external\personal users to do this as are hoping Juniper would pass the users login details thorough instead, as it does for the other 2 solutions.

The users login using just there username and password. The domain is prepopulated.

Regards

Phil

[SVK_]

Ok, so internal users are using citrix receiver.

To identify this issue we need to collect logs as to why web sso succeeds and sso to published app fails.

It would be better to open a support case.

Regards,

SVK

[Philcol76_]

HI SVK,

This turned out to be a tick in a box on the Citrix side to allow pass-through and now its all working. Thanks for the assistance.

Regards

Phil

[SVK_]

This is why I was interested in knowing the behaviour when accessing the web interface from the Lan. by which we could have had more clues in narrowing down the issue.But unfortunatley we couldn't test that as you were using citrix receiver online plugin.

I am glad that the issue is resolved.