Summary
This article describes how to configure Single Sign-on (SSO) for Web Interface using version 10.x of the Presentation Server Client.
Background
Version 10.x of the Presentation Server Client for 32-bit Windows lets administrators use a provided Group Policy object (GPO) template file (called icaclient.adm) to modify some settings that were previously modified in the appsrv.ini file (for example, SSO through Web Interface). The administrator no longer needs to manually add the
EnableSSONThruICAFile=ON parameter to the appsrv.ini file. This is now accomplished with the icaclient.adm file.
Note: A truncated version of the appsrv.ini file is copied to the user profile by default. This behavior is expected.
The icaclient.adm file is available when you download the icaweb.cab file and extract it. It is also available when you install the Presentation Server Client. The default location for the icaclient.adm file is
\Program files\Citrix\ICA client\configuration folder
Procedure- From a system with the 10.x client installed, open the Group Policy Object Editor by going to Start > Run and typing gpedit.msc
- In the Group Policy Object Editor, right-click Administrative Templates and click Add/Remove Templates.
- Browse to C:\Program Files\Citrix\ICA Client\Configuration and add the icaclient.adm file.
- Expand Computer Configuration > Administrative Templates > Citrix Components > Presentation Server Client > User Authentication.
- On the right pane, select Local User name and password.
- Right-click and enable the policy for pass-through authentication. This policy is applied to all users logging on to this workstation.
- To apply GPO settings on a per-user basis, configure the settings under User Configuration. Expand User Configuration > Administrative Templates > Citrix Components.
- Run GPupdate on the workstation to apply the policy immediately.
- Log off and log on again.
- Check Task Manager on the workstation to verify that the ssonsvr.exe process is running.
More Information
Group Policy settings can be configured on each individual client machine or in Active Directory for large environments.
Source
Linear Mode
