Linux Virtual Delivery Agent

Double-hop single sign-on authentication

January 23, 2023

Contributed by:

User credentials for accessing a StoreFront store can be injected to the AuthManager module of Citrix Workspace app for Linux and Citrix Receiver for Linux 13.10. After injection, you can use the client to access virtual desktops and applications from within a Linux virtual desktop session, without entering user credentials for a second time.

Note:

This feature is supported on Citrix Workspace app for Linux and Citrix Receiver for Linux 13.10.

To enable the feature:

On the Linux VDA, install Citrix Workspace app for Linux or Citrix Receiver for Linux 13.10.

Download the app from the Citrix download page for Citrix Workspace app or for Citrix Receiver.

The default installation path is /opt/Citrix/ICAClient/. If you install the app to a different path, set the ICAROOT environment variable to point to the actual installation path.
In the Citrix StoreFront management console, add the HTTP Basic authentication method for the target store.
Add the following key to the AuthManager configuration file ($ICAROOT/config/AuthManConfig.xml) for allowing the HTTP Basic authentication:
```
 <Protocols>
      <HTTPBasic>
          <Enabled>True</Enabled>
     </HTTPBasic>
 </Protocols>
 
```

Run the following commands to install the root certificate in the specified directory.

cp rootcert.pem $ICAROOT/keystore/cacerts/
$ICAROOT/util/ctx_rehash  $ICAROOT/keystore/cacerts/
<!--NeedCopy-->

Run the following command to enable the feature:

/opt/Citrix/VDA/bin/ctxreg update -k "HKLM\System\CurrentControlSet\Control\Citrix" -v "LurSsonEnabled" -d "0x00000001"
<!--NeedCopy-->

Launch a Linux virtual desktop session and start Citrix Workspace app for Linux or Citrix Receiver for Linux 13.10 within that session.

You are prompted for a store account when you start the Citrix Workspace app for the first time. Later on, you are logged on to the store you specified earlier automatically.

Note:

Enter an HTTPS URL as your store account.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Double-hop single sign-on authentication

January 23, 2023

Contributed by:

January 23, 2023

Contributed by:

Double-hop single sign-on authentication

In this article