This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information

This article describes user experience of using Pass-through with username and password or smart card logon with Citrix Receivers.

Requirements

Ensure that you have a complete smart card deployment for Citrix XenDesktop, physical computers or thin client devices to test the smart card integration with Citrix Receiver for Windows and Linux. Ensure that you can launch a desktop session with both username/password and smartcard methods.

Refer to https://docs.citrix.com/content/dam/docs/en-us/storefront/3-5/Smart%20card%20configuration%20for%20Citrix%20Environments.pdf for smart card configuration for Citrix environments.

When you try to logon from client by using Citrix Receiver with a locked account, you will find the prompt message is different from by using username/password and by using smartcard. Following is an example, after AD account is locked, a user try to logon by using different ways.

Logon Using Username and Password

If user logs on by using username and password. It prompts a message as below, which indicates that the account is temporarily locked.

Logon Using Smart Card

If user logs on by using smart card, there is no message displayed saying the account is locked out. You can get following message after logon, which only indicates that user cannot log on by using smart card and suggests to try another logon option.

Some explanation of the above symptoms is when using a smart card, Integrated Windows Authentication (IWA) is used to authenticate to StoreFront and PNA protocol messages contain no credential. So it is not supported by StoreFront to report such error message like the account is locked. As a result, the behavior of logon with smart card is different from logon with username and password.

For more information, please refer to smart card deployments documentation at https://docs.citrix.com/en-us/xenapp-and-xendesktop/7-13/secure/smart-cards/smart-cards-deployments.html