This article is intended for Citrix administrators and technical teams only.Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information

Unable to add Store to Workspace App on Windows and Mac Client machines

Problem Cause

Corrupted SessionProfile Action in ADC config.

HTTP request from Workspace App
===========================
POST /cgi/login HTTP/1.1

Cache-Control: no-cache

Connection: Keep-Alive

Pragma: no-cache

Content-Type: application/x-www-form-urlencoded

Accept-Language: en-US

Cookie: NSC_TASS=/No%20Page; eula=[EULA]; pwcount=2

User-Agent: CitrixReceiver/19.11.0.65534 Windows/10.0 AuthManager/19.10.200.140 (Release) X1Class CWACapable

X-Citrix-Gateway: [customer gateway FQDN]

Content-Length: 51

Host: [customer gateway FQDN]

login=********&passwd=******&passwd1=******

ADC syslogs: 

01/28/2020:18:40:14 GMT vxuwlbinz02 0-PPE-0 : default AAATM Message 156540 0 : "SAMLIDP: Checking whether current flow is SAML IdP flow, input /No%20Page"

 01/28/2020:18:40:14 GMT vxuwlbinz02 0-PPE-0 : default AAATM Message 156541 0 : "Base64 decode failed while checking whether this is samlidp flow"

 01/28/2020:18:40:14 GMT vxuwlbinz02 0-PPE-0 : default AAATM Message 156542 0 : "Invaid tass cookie while checking whether current authentication is due to idp functionality: /No%20Page"

 01/28/2020:18:40:14 GMT vxuwlbinz02 0-PPE-0 : default SSLVPN Message 156544 0 : "VPN_DBSREP_GET{ns_vpn_getdbs_svc:7199}, dbsrep_name: [Storefront_LB VIP]_e_1bb_ipv4, dbsrep: 0x18a2b7c0, dbsrep->ref_cnt: 2"

 01/28/2020:18:40:14 GMT vxuwlbinz02 0-PPE-0 : default SSLVPN Message 156545 0 : "VPN_DBSREP_GET{init_icamode_homepage:6681}, domain: [Storefront_LB VIP], servicetype: 14, port: 443, session: 0x16600000, user: [username], dbsrep: 0x18a2b7c0, dbsrep->ref_cnt: 2"

ADC Counters 

-> nsconmsg111 -K newnslog -s disptime=1 -d current -g aaa_unknown_url_login_redirect | grep 'Jan 28 18'

   31  21000      287     2    0 aaa_unknown_url_login_redirect Tue Jan 28 18:37:53 2020

   32 133000      289     2    0 aaa_unknown_url_login_redirect Tue Jan 28 18:40:06 2020

   33  14000      291     2    0 aaa_unknown_url_login_redirect Tue Jan 28 18:40:20 2020

HTTP response from Gateway
 

HTTP/1.1 302 Object Moved

Location: /vpns/choices.html <--- incorrect redirection from Gateway

Set-Cookie: NSC_AAAC=09c73cbe4a6d3557a80b69e9019cfc7e0c4fe4c3d45525d5f4f58455e445a4a42;Secure;Path=/;

Set-Cookie: NSC_VPNERR=3,wicps,cvpn,java;Path=/;Secure

Set-Cookie: NSC_CERT=xyz;Path=/;expires=Wednesday, 09-Nov-1999 23:12:40 GMT;Secure

Connection: close

Content-Length: 0

Cache-control: no-cache, no-store

Pragma: no-cache

Content-Type: text/html