To configure passthrough for XenApp Services URL / PNAgent Services site on StoreFront.

Instructions

Configuring SSON with Citrix Receiver and StoreFront requires you to make a change on your StoreFront servers to allow SSON to work correctly with the XenApp Services URL / PNAgent Services site.

Enabling Domain Pass-Through Authentication Methods in the Authentication Node and on the Receiver for Web site does not change the default authentication method for XenApp Services URL.

Also only one authentication method can be configured for each XenApp Services URL and the default authentication method is Explicit (Prompt for user name and password).

To configure SSON as the default authentication method for your XenApp Services URL you first need to find the Microsoft IIS Site ID.

Open Command Prompt on your StoreFront Server and enter the command:

C:\>C:\Windows\System32\inetsrv\appcmd.exe list site
SITE "Default Web Site" (id:1,bindings:http/*:80:,net.tcp/808:*,net.pipe/*,net.msmq/localhost,msmq.formatname/localhost,https/*:443:,state:Started)

The ID for the IIS Site will be returned as id:X

Next, make sure all the StoreFront management consoles are closed and then open PowerShell.

Run the following command, entering the id from the previous command and the path to the store:

PS C:\> & "installationlocation\Scripts\EnablePnaForStore.ps1" -SiteId IISid -ResourcesVirtualPath StorePath -LogonMethod sson

Example:

PS C:\> & "C:\Program Files\Citrix\Receiver StoreFront\Scripts\EnablePnaForStore.ps1" -SiteId 1 -ResourcesVirtualPath /Citrix/Store -LogonMethod sson

After the PowerShell script has run successfully, you will need to propagate the settings to your other StoreFront Servers if you have more than one.

Close your Powershell window and then open StoreFront management console and click Propagate changes. You should be able to use Single Sign on successfully if your endpoint has all the required SSON settings configured that are listed in the article - https://support.citrix.com/article/CTX133982