Hotfix package name: SSOP500WX86002.zip
For: Single Sign-On Plug-in, Version 5.0
Replaces: All previous versions
Date: November, 2013
Languages supported: English (US), German (DE), Spanish (ES), French (FR), Japanese (JA)
Readme version: 1.00

Readme Revision History

Important Notes about This Release

• Caution! This release may require you to edit the registry. Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.
• When you upgrade the plug-in software, the process.xml, applist.ini, and mfrmlist.ini files are backed up in their original folder location by the upgrade process. This preserves the plug-in settings; to revert to those settings, replace the process.xml, applist.ini, and mfrmlist.ini files created by the upgrade process with these backed up files.

Where to Find Documentation

This document describes the issue(s) resolved by this release and includes installation instructions. For additional product information, see Citrix eDocs, the Citrix Product Documentation Library.

New Fixes in This Release

1. Version 4.8 of the Single sign-on plug-in fails to start if the list of revoked users (Question-based authentication > Other Tasks > Revoke Security question registration for a user) exceeds a certain number of characters.

   [From SSOP500WX86002][#260567]

2. This release includes the latest version of the SSLSDK - Version 12.1.7.15692.

   [From SSOP500WX86002][#LA2692]

3. This feature enhancement allows you to suppress the following offline notification message that appears when the user removes a device from the network:

   "Citrix Single Sign-On is working offline. Changes to user data will be stored on the server when the connection is reestablished."

   To suppress the message, set the following registry key:

   HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\MetaFrame Password Manager\Shell\Popups
   Name: SuppressMessages
   Type: DWORD
   Data: 0x0001

   [From SSOP500WX86002][#LA2876]

4. The Single sign-on plug-in might fail to submit credentials to the Nexus terminal emulator when running multiple sessions of the emulator and having CICS windows opened.

   [From SSOP500WX86002][#LA3484]

5. The AutoDetectDisableNever feature, first introduced in Password Manager 4.6 Service Pack 1, does not work in Version 5 of the Single sign-on plug-in integrated with Citrix Receiver.

   The feature allows you to disable the user option to permanently prevent the plug-in from recognizing an application and storing credential information. This fix makes the feature available again in this version of the plug-in.

   To enable the fix, you must set the following registry key:

   • On 32-bit Windows:
     HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\MetaFrame Password Manager\Extensions\AccessManager
     Name: AutoDetectDisableNever
     Type: DWORD
     Data: 00000001
     
   • On 64-bit Windows:
     HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\MetaFrame Password Manager\Extensions\AccessManager
     Name: AutoDetectDisableNever
     Type: DWORD
     Data: 00000001

   [From SSOP500WX86002][#LA3792]

Fixes from Replaced Hotfixes

1. When using the domain password sharing group for Version 6 of WebNow, the logon screen prompting users for credentials might fail to populate correctly.

   [From SSOP500WX86001][#LA1034]

2. Incorrect Chinese (zh-CN) translations can appear in the password saving dialog box.

   [From SSOP500WX86001][#LA1128]

3. Installing the Single sign-on plug-in on certain client operating systems where Citrix Receiver is installed can result in the deletion of the following registry key, which was initially created when installing Receiver: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\CitrixOnlinePluginPackWeb. As a result, the plug-in appears twice in App/Remove Programs.

   [From SSOP500WX86001][#LA1284]

4. Disabling the setting Enable users to cancel credential storage when a new application is detected from the console (User configuration > Client-side interaction > Enable users to cancel credential storage when a new application is detected) does not properly propagate to the plug-in. As a result, users can cancel and close the Credential Storage wizard even when that option id disabled.

   [From SSOP500WX86001][#LA1685]

5. Internet Explorer 8 with protected mode enabled might exit unexpectedly while refreshing Version 5.0 of the Single sign-on plug-in from the notification area.

   [From SSOP500WX86001][#LA1743]

6. Uninstalling the plug-in removes the VC++ 2008 Redistributable package without notice - regardless whether it was was installed by the plug-in or a different installer. Other applications that depend on the redistributable can break as a result.

   [From SSOP500WX86001][#LA1925]

7. The Advanced Matching property used to provide additional identifiers (Identity form > Advanced Matching > Control Matching > Add Match) might fail to work on Version 5.0 of the Single sign-on plug-in.

   [From SSOP500WX86001][#LA1951]

8. This fix addresses an issue in Version 5 of Single sign-on that requires user interaction in the case of a terminal emulator-based application for which multiple logon forms are specified and that need to be processed in quick succession.

   [From SSOP500WX86001][#LA2329]

9. When creating a new logon, clicking Reveal Password after entering a password but before saving the new logon, the following error message appears: "There was an error acquiring the group password."

   To suppress the message, set the following registry key after installing this fix:

   • On 32-bit systems:
     HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\MetaFrame Password Manager\Shell\Popups
     Name: SuppressMessages
     Type: DWORD
     Data: 0x0002
   • On 64-bit systems:
     HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Citrix\MetaFrame Password Manager\Shell\Popups
     Name: SuppressMessages
     Type: DWORD
     Data: 0x0002

   [From SSOP500WX86001][#LA2877]

10. Attempts to change password in certain Web applications might fail after submitting the change. When attempting to submit the change the second time, the following message appears:

    "Citrix Single Sign-On has recently changed your logon information for <application name>. Do you want to change your logon information again?"

    This feature enhancement allows you to suppress the message when the user tries to change the password the second time. To suppress the message, you must create the following registry key:

    • On 32-bit Windows
      HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\MetaFrame Password Manager\Shell\Popups
      Name: SuppressMessages
      Type: REG_DWORD
      Data: 0x00000100 (256)
    • On 64-bit Windows
      HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432node\Citrix\MetaFrame Password Manager\Shell\Popups
      Name: SuppressMessages
      Type: REG_DWORD
      Data: 0x00000100 (256)

    [From SSOP500WX86001][#LA2931]

Installing and Uninstalling This Release

Notes:

• This hotfix is packaged with Microsoft Windows Installer 2.0 as a .msi file. For more information about deploying .msi files, see Microsoft article 884016 or visit the Microsoft Web site and search on keyword msiexec.
• To install this hotfix successfully, servers must not have registry modification restrictions in place.

To install this hotfix:

1. Copy the hotfix package to an empty folder on the hard drive of the server you want to update.
2. Close all applications.
3. Run the executable, CitrixSSOPlugin64.exe.
4. Restart the server.

To uninstall this hotfix:

1. From the Start menu, select Settings > Control Panel.
2. In Control Panel, double-click Add/Remove Programs.
3. Highlight the hotfix you want to uninstall and click Uninstall.
4. Follow the directions on-screen.