Policy

Allow Single Sign-On for Edge WebView

When the policy is disabled, single sign-on (SSO) is disabled for devices that are Entra ID-joined or registered. The end user must authenticate in the Workspace app if Entra ID is used as the identity provider. When the policy is not configured, single sign-on (SSO) is enabled. By default,policy is enabled.

Policy
Pack Citrix Workspace
Category Citrix Components / Citrix Workspace / User authentication
Policy ID 9b0b46472980
Internal name Policy_Enable_AllowSingleSignOnForEdgeWebView

Registry

Copy registry mappings

HKLM\Software\Policies\Citrix\AuthManager\AllowSSOForEdgeWebview (enabled) = 
HKLM\Software\Policies\Citrix\AuthManager\AllowSSOForEdgeWebview (disabled) =

Policy notes

When the policy is disabled, single sign-on (SSO) is disabled for devices that are Entra ID-joined or registered. The end user must authenticate in the Workspace app if Entra ID is used as the identity provider. When the policy is not configured, single sign-on (SSO) is enabled. By default,policy is enabled.

Related policies

Enhanced Domain passthrough for single sign-onKerberos authenticationLocal user name and passwordManage App ProtectionMicrosoft Edge WebView for StoreFront authenticationPrevent storing persistent cookiesSingle Sign-on for NetScaler Gateway