When I think of all the planets and stars that have to line up correctly to make SSO work through WI, I'm amazed that you have this problem with machines that are not part of the domain! If there are only a few clients involved, it might be simpler to take these two lines out of the clients' appsrv.ini. SSOnUserSetting=On EnableSSOnThruICAFile=On Steve Raffensberger Sovereign Bank Email: sraffens@xxxxxxxxxxxxxxxxx -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Chad.M Schneider Sent: Wednesday, October 03, 2007 3:51 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Web Interface Authentication Issue I concur! >>> gareese@xxxxxxxxx 10/3/2007 2:45 PM >>> I would make two sites in this situation. One for pass through and one for explicit. Greg On 10/3/07, Martin, Susan P. (HQ) <sumartin@xxxxxxxxxxxxx> wrote: > > I am trying to set up Citrix Web Interface (v4.0) to use both Explicit > and Pass through authentication in a Presentation Server 4.0 Farm. > > > > Explicit authentication is needed for users who are logging into Citrix > Web Interface from a machine that is not part of the domain therefore no > credentials are available for pass-through. Pass-through authentication is > needed for users who are logging into Citrix Web Interface from a domain > machine (single sign on). > > > > I have configured the Web Interface server by checking the two check > boxes; explicit and pass-through authentication. Pass through > authentication turns out to be the default authentication type when a user > goes to the Web Interface site. Users who are not logging into the domain > are directed to an empty application menu (since the credentials passed > through have no permissions to any applications in the farm). As a result > they need to click on the log off button and then the log back in link > before they are presented with the login prompt for explicit authentication. > > > > Is there a way to allow users not logging into the domain to be presented > with explicit authentication method and for users who are logging into the > domain to use pass through authentication? Any help is very much > appreciated. > > > > > > Thank you, > > Susan Martin > > Network Administrator > ************************************************ For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: //www.freelists.org/list/thin ************************************************ This message contains information which may be confidential and privileged. Unless you are the addressee (or authorized to receive for the addressee), you may not use, copy or disclose to anyone the message or any information contained in the message. If you have received the message in error, please advise the sender by reply e-mail, and delete or destroy the message. Thank you. ************************************************ For Archives, RSS, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: //www.freelists.org/list/thin ************************************************