• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 488
  • Last Modified:

Difference between Citrix ICA client pass thru authentication and sson?

Hello there,

What is the difference between Citrix ICA client pass thru authentication and sson?

Please advise.

Thanks and Regards
1 Solution
Pedro GamaCitrix AdminCommented:

Basically during Pass-through authentication the user credentials are passed to a Web Interface site and then to the XenApp/XenDesktop servers, preventing users from having to explicitly authenticate at any point during the Citrix application launch process.  
The user's  credentials are actually never exchanged. Instead, the signed hash is provided to IIS, proving that said user had already been authenticated at the Windows desktop.  The web interface user uses the user’s AD context (sometimes referred to as a token) to retrieve the user’s AD group membership and pass this list of groups directly to the XML service for authentication.  At this point, the user has successfully passed through to the Web Interface site, and can now view his/her Citrix resources.

The Citrix Receiver makes sure the user is fully passed through to the application or desktop through a process called SSONSVR.exe, which is the single sign-on component of the client. This process is fully responsible for passing the user credentials to XenApp or XenDesktop and without it pass-through authentication would not work.

There's a very interesting citrix blog talking about pass-through-authentication here:


Have a read!

Hope it helps
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now