Connect to your corporate network using Citrix SSO configured in an Intune environment

This topic captures details about connecting to your corporate network using Citrix SSO app configured in Microsoft Intune Android Enterprise environment.


  • You have enrolled the device in Intune using Intune Company Portal app.
  • Work profile for the user is set up on the device.
  1. Open Intune Company Portal app on the device from the work profile.

  2. Click the three dots menu to open settings for the app and scroll to the bottom of the screen. Tap SYNC to sync with Intune server and then navigate to the main app screen.

  3. Tap on the APPS tab and tap on the Managed Google Play Store link.

    The list of approved apps for the user appears.

    Citrix SSO app in Intune portal

  4. Tap Citrix SSO app.

    Citrix SSO app appears in the Managed Google Play store.

  5. Tap INSTALL.

  6. Navigate back to the work profile apps list. The Citrix SSO is added to the installed app list.

  7. Tap the Citrix SSO app icon in the WORK profile app list to open it.

    Install Citrix SSO app and grant permissions

    Citrix SSO app opens. You are prompted to allow or disallow permission to communicate securely with your company’s internal network.

  8. Tap ALLOW to grant the permission. Citrix SSO app closes if you choose DON’T ALLOW and you cannot use the Citrix SSO app.

    Note: You might be prompted to allow or deny permission to manage and make phone calls (if not already granted via Intune). Tap Allow to grant permission. You may deny this permission but if Intune NAC check is required for device authentication on Citrix Gateway, you cannot connect to your company’s internal network until you grant this permission.

  9. The My Corporate VPN (or the name you chose in the Citrix SSO configuration in Intune) is listed in the Managed Connections section of the CONNECTIONS tab. Tap on this connection, you are prompted for the credentials to authenticate with Citrix Gateway.

  10. Provide credentials for authentication with Citrix Gateway and tap LOG IN.

    Enter credentials and allow connection requests

    You may be prompted to select a certificate if client certificate authentication is configured on Citrix Gateway. You can provide access to the certificate.

  11. You are prompted by Android system to allow Connection request for VPN tunnel setup. Tap OK to grant Citrix SSO permission to establish secure connection with your internal company network.

    Note: This prompt is only displayed when you establish a secure connection to Citrix Gateway for the first time. It is not displayed for subsequent connection attempts until Citrix SSO app is uninstalled and then installed again on the device.

You are connected to your internal company network. A key icon appears in the device status bar notifying you that VPN connection is active. Citrix SSO app’s VPN service notification icon also appears on the status bar. The connect switch changes its state to connected and a check mark icon appears next to the VPN profile name.

Connect to your corporate network using Citrix SSO configured in an Intune environment

In this article

Was this article helpful?