If you are authenticating through the Citrix WI and seeing your applications, the SSO portion of the authentication is done from the IVE's perspective. If you have enabled SSO on the Citrix WI and you are still being prompted by the Windows GINA, it is usually due the Citrix client being installed without SSO enabled (this will require a reinstall of the Citrix client to properly enable SSO). We have this working using explicit authentication configured on the WI and using forms pass-through authentication from the IVE to WI 4.6. Since your clients are ostensibly coming in from the outside, would you really want to use pass-through in any case?
... View more