Dell Hybrid Client version 2403 Administrator's Guide

Single Sign-On (SSO) to VDI applications

Dell Hybrid Client supports Single Sign-On (SSO) to VDI applications. It enables you to log in only one time with one set of credentials to get access to all your applications.

• Citrix SSO—SSO is supported only when using a Citrix StoreFront connection. SSO feature is enabled when you log in to a remote session from the local device. Citrix SSO is supported using a smart card. Citrix SSO works only for domain users.
  NOTE: SSO is not supported on Citrix PNAgent connections and for applications inside the session.

  To use the SSO feature, you must enable the following options from Citrix Delivery controller:

  • Domain Pass-Through—This option must be enabled in Store Service > Manager Authentication Methods on Citrix Studio. For information about the steps to configure Citrix feature for Pass-Through Authentication feature, see How to Manually Install and Configure Citrix Receiver for Pass-Through Authentication article (CTX133982) at support.citrix.com.
  • HTTP Basic—This option must be enabled in Store Service > Manager Authentication Methods on Citrix Studio.
  • Smart card authentication—This option must be configured on the StoreFront console. This option enables you to use a smart card to authenticate user from initial login to the Citrix VDI session. When using the smart card authentication for Citrix SSO, ensure that you have configured the PIN on your smart card, and installed the required smart card certificates on Dell Hybrid Client. For information about how to configure the smart card support in Citrix Workspace app for Linux, see the Citrix documentation for Citrix Workspace app for Linux at docs.citrix.com.
• RDP SSO—RDP supports SSO. You must create the RDP connection with FQDN, and the device time must be synchronized with the domain time of the RDP server. SSO is supported from Windows 10 1607 and Windows 2016 onwards. However, SSO is not supported for applications inside the session.

  To use the SSO feature, you must enable the following options on the windows server:

  • Windows Defender Remote Credential Guard—This option must be enabled on the server side. For information about the steps to enable Windows Defender Remote Credential Guard, see the Enable Windows Defender Remote Credential Guard article at docs.microsoft.com.
  • Allow log on through Remote Desktop Services—This option must be enabled in the local security policy. You can access the Local Security Policy window using secpol.msc.
• VMware SSO—Single Sign-On (SSO) is not supported on VMware connections and File Type Association (FTA).