Policy

Enhanced Domain passthrough for single sign-on

This policy allows Citrix Workspace app to use Enhanced Domain passthrough for single sign-on. When this policy is enabled, the sign-in credentials (pass-through authentication) from the local machine are used to authenticate to the remote server without exchanging the actual username and password. This policy requires VDA version 2308 or later.

Policy
PackCitrix Workspace
CategoryCitrix Components / Citrix Workspace / User authentication
Policy ID4210b82b19eb
Internal namePolicy_EnableRCG

Registry

Copy registry mappings

HKLM\Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local Credentials\EnableEnhancedDomainPassthrough (enabled) = 
HKLM\Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local Credentials\EnableEnhancedDomainPassthrough (disabled) =

Policy notes

This policy allows Citrix Workspace app to use Enhanced Domain passthrough for single sign-on. When this policy is enabled, the sign-in credentials (pass-through authentication) from the local machine are used to authenticate to the remote server without exchanging the actual username and password. This policy requires VDA version 2308 or later.

Related policies

Allow Single Sign-On for Edge WebViewKerberos authenticationLocal user name and passwordManage App ProtectionMicrosoft Edge WebView for StoreFront authenticationPrevent storing persistent cookiesSingle Sign-on for NetScaler Gateway