Citrix Gateway

Configuring single sign-on to Web Applications by Using LDAP

September 15, 2021

Contributed by:

S C

When you configure single sign-on and users log on by using the user principal name (UPN) with a format of username@domain.com, by default single sign-on fails and users must authenticate two times. If you need to use this format for user logon, modify the LDAP authentication policy to accept this form of user name.

To configure single sign-on to web applications

In the configuration utility, on the Configuration tab, expand Citrix Gateway > Policies > Authentication.
In the details pane, on the Policies tab, select an LDAP policy and then click Open.
In the Configure Authentication Policy dialog box, next to Server, click Modify.
Under Connection Settings, in Base DN (location of users), type DC=domainname,DC=com.
In Administrator Bind DN, type LDAPaccount@domainname.com, where domainname.com is the name of your domain.
In Administrator Password and Confirm Administrator Password, type the password.
Under Other Settings, in Server Logon Name Attribute, type UserPrincipalName.
In Group Attribute, type memberOf.
In Sub Attribute Name, type CN.
In SSO Name Attribute, type the format by which users log on, and then click OK twice. This value is either SamAccountName or UserPrincipalName.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Configuring single sign-on to Web Applications by Using LDAP

September 15, 2021

Contributed by:

S C

September 15, 2021

Contributed by:

S C

Configuring single sign-on to Web Applications by Using LDAP

To configure single sign-on to web applications

In this article