citrix receiver netscaler gateway keeps asking login

Your external users going through gatweay, can't resolve the internal beacon and so the storefront treats them as a gateway user processes credentials from gateway and accepts gateway passthrough.įor your internal users NOT going through gateway, they will resolve the beacon AND storefront can treat them as a direct storefront connection and prompt for credentials without relying on gateway. So that when a StoreFront decides whether you are a gateway user or an internal user, it knows what to do. The internal beacon is supposed to be an internal URL that only on network/internal users can see. So for your internal users being routed through gateway, it probably means the internal beacon is 'confusing' the situation for the storefront. Only if the client is internal and it get's redirected to the storefront the authentication prompt occurs a second time. If the client is externally, SSO and all those features through the netscaler are working without issue.

You might need to share more details of your config to narrow down the problem. There are other factors that can prevent this from working, but that would be a start.Īlso, unless you need internal users going through gateway for ICA Proxy + Insight, you could route internal users direct to storefront as Carl noted.Ĭonfigurations such as single unified fqdn, misconfigured base urls, and beacons, or more complex authentication scenarios than what we're assuming can also add complexity. On Storefront you must have the storefront enabled from gateway authentication as well On Gateway you must have the single sign on to web setting enabled in the session profile (and potentially a traffic sson policy dependening on version) For Storefront to accept credentials from gateway:

Citrix receiver netscaler gateway keeps asking login