iapp Citirx xenapp 7.5

HI Cory, are you replacing storefront servers with dynamic webtops or integrating with storefront 2.5?

If you are integrating with sf 2.5 you will need to modify the iApp created SSO to account for the different authentication url's used by SF 2.5.

Modify start URI: /Citrix/"store"/ExplicitAuth/Login*

Modify Form Action /Citrix/"store"/ExplicitAuth/LoginAttempt

Remove Domain "domain" from hidden form parameters.

Were "store" and "domain" are your unique values.

Last piece is to define the domain used in your environment. You can do this on the storefront server by defining the trusted domain for your environment rather then the default "Any domain". By doing so you no longer need to supply the domain when logging into storefront.

Or you can modify your access policy to include the domain when presenting credentials to storefront server: open access policy and select "sso credentials mapping"

Choose custom from drop down options next to sso token username field and add the following: expr {"domain"\[mcget {session.logon.last.username}]"} were domain is your unique value.

Last piece, remove the "variable assign" object from your access policy since it is no longer being used.