Architecting a Citrix Networking Solution — Question 9

Scenario: A Citrix Architect has configured NetScaler Gateway integration with a XenApp environment to provide access to users from two domains: vendorlab.com and workslab.com. The Authentication method used is LDAP.
Which two steps are required to achieve Single Sign-on StoreFront using a single store? (Choose two.)

Answer options

• A. Configure Single sign-on domain in Session profile ‘userPrincipalName’.
• B. Do NOT configure SSO Name attribute in LDAP Profile.
• C. Do NOT configure sign-on domain in Session Profile.
• D. Configure SSO Name attribute to ‘userPrincipalName’ in LDAP Profile.

Correct answer: B, D

Explanation

The correct answers are B and D because not configuring the SSO Name attribute in the LDAP Profile prevents conflicts that could disrupt Single Sign-on functionality. Additionally, configuring the SSO Name attribute to ‘userPrincipalName’ ensures that the correct user identifier is used for authentication, allowing seamless access across domains.