When accessing websites the password manager in the browser always prompts for saving the username and password even though autocomplete is entered as off in NetScaler's index.html file. NetScaler should not allow the username and password to be saved.

When you use LDAP+RSA token the password manager does not prompt to save the username and password.

This enhancement request is currently with the product team for review. Reach out to Citrix Technical Support to know the status of the enhancement request.

Problem Cause

This is an expected behavior. Several browsers (Chrome, Firefox, Internet Explorer) have implemented to ignore the functionality of autocomplete = off as per the web-forms standard. Because to this change made by browsers , autocomplete=off does not stop the password mangers from working and the password manager always prompts for saving the password and requires user interaction to save and ensures no security issues.

So as a best practice users should not save the password.

• Firefox -  ignore autocomplete="off" when offering to save passwords via the password manager

• Chrome - Passsword managers and autocomplete='off'

• Internet Explorer - Passsword managers and autocomplete='off'