Enabling PNAgent Single Sign On (SSO) with Storefront 2.1

Background Information

StoreFront 2.1 provides compatibility for the Online Plug-In and legacy clients by enabling the exposure of a Web Interface “Services Site” style config.xml page. This is used by the PNAgent to discover the site (i.e. store) configuration options and is configured

More information: http://support.citrix.com/proddocs/topic/dws-storefront-21/dws-legacy-support.html

By default, StoreFront is configured to only allow “Prompt” authentication from a PNAgent connection and an application launch.

Enabling PNAgent SSON to StoreFront

In order to allow PNAgent to use Single Sign-On to connect to the StoreFront server and enumerate the applications, do the following:

  1. Browse to C:\inetpub\wwwroot\Citrix\[StoreName]\Views\PnaConfig
  2. Make a backup of “Config.aspx”
  3. On the production copy of “Config.aspx”, make the following changes:
  4. Find the line starting with “<LogonMethod>” and ending with “</LogonMethod>”
  5. Change this line to “<LogonMethod>sson</LogonMethod>”
  6. Save the file and restart PNAgent. It should now automatically login and return the published applications.

Enabling PNAgent SSON to the Published Applications

In order to allow a user to correctly launch a published application delivered by SSON PNAgent, do the following:

  1. Browse to C:\inetpub\wwwroot\Citrix\[StoreName]
  2. Make a backup of “web.config”
  3. On the production copy of “web.config”, make the following changes:
  4. Find the line starting with “<pnaProtocolResources”
  5. Within that line, locate the “logonMethod” setting and change the method to “sson”. i.e. logonMethod=”sson”
  6. Your applications should now authenticate correctly.
FacebookLinkedInTwitterGoogle+Share

One thought on “Enabling PNAgent Single Sign On (SSO) with Storefront 2.1

  1. Thank you so much Dan Herman.. You made my day.. Issue got resolved finally. We were struggling & investing this issue from last 3 days & finally it got resolved now. Million Thanks.

Leave a Reply

Your email address will not be published. Required fields are marked *