Citrix Files GPO autologin on frist launch

  • 1
  • Question
  • Updated 1 week ago
Hi,
I've configured GPO the same as I did for DriveMapper:
1. Enabled : true
2. Account: company.sharefile.eu
On the first launch Citrix Files asks to press login in button, but DriveMapper did that automatically for the user. 
Is it possible to configure Citrix Files to enable autologin on first launch?

Thanks

Photo of Aleksandras Artemjevas

Aleksandras Artemjevas

  • 32 Posts
  • 3 Reply Likes

Posted 7 months ago

  • 1
Photo of Prabhat Tyagi

Prabhat Tyagi, Director, Product Engineering

  • 188 Posts
  • 9 Reply Likes
Hi Aleksandras,

If SAML is configured for the account, your steps seem to be sufficient and Citrix Files should automatically sign you in. For VDA env, it may take a few seconds (<10) for the app to launch and auto sign in the user. Did you have to manually log in using the auth dialog after pressing the Log In button? You can submit your logs and it would help with troubleshooting.

Cheers
Prabhat Tyagi


(Edited)
Photo of Aleksandras Artemjevas

Aleksandras Artemjevas

  • 32 Posts
  • 3 Reply Likes
Hi,
So it looks like it actually tried to login silently, but fails. 

2018-09-21T09:49:17.118|INFO |[PROXYHANDLER] User is not authenticated. Skipping proxy check.2018-09-21T09:49:18.335|INFO |[Connection] Connected to ShareFile
2018-09-21T09:49:18.350|INFO |[Connection]  -> True
2018-09-21T09:49:18.522|INFO |[GPO] Max Logs Folder size is not configured using default value
2018-09-21T09:49:19.785|INFO |[APP] RELEASE Version - 4.2.70.0
2018-09-21T09:49:19.785|INFO |[APP] OS Name: Windows 7, Version: 6.1
2018-09-21T09:49:19.785|INFO |[GPO] EnableApplication is set to 1 at HKEY_CURRENT_USER level
2018-09-21T09:49:20.300|INFO |[Analytics] StartTiming::App::launch_timing::<none>
2018-09-21T09:49:20.518|INFO |0HLGVHPDRFKDK-AppStartup|[Analytics] StartTiming::App::launch_timing::<none>
2018-09-21T09:49:21.002|INFO |0HLGVHPDRFKDK-AppStartup|[MainWindow]Initialized MainWindow
2018-09-21T09:49:21.002|INFO |0HLGVHPDRFKDK-AppStartup|[DatabaseManager] Initializing global databases
2018-09-21T09:49:21.314|INFO |0HLGVHPDRFKDK-AppStartup|[SfWindowsApp] Starting login
2018-09-21T09:49:21.314|INFO |0HLGVHPDRFKDK-AppStartup|[DatabaseManager] Initializing global databases
2018-09-21T09:49:21.360|INFO |0HLGVHPDRFKDK-AppStartup|[OAuthTokenProvider] Trying to get OAuth token using SSO authentication
2018-09-21T09:49:21.360|INFO |0HLGVHPDRFKDK-AppStartup|[OAuthTokenProvider] Environment is VDA. Attempting VDA SSO
2018-09-21T09:49:26.398|ERROR|0HLGVHPDRFKDK-AppStartup|[VdaSsoProvider] Unable to fetch sharefile sso handle --> 
System.TimeoutException: The operation has timed out.
   at System.IO.Pipes.NamedPipeClientStream.Connect(Int32 timeout)
   at ShareFile.Client.Windows.Cbfs.Auth.CitrixFilesAuth.SSO.Vda.VdaSsoProvider.TryGetShareFileSSOHandle(ShareFileSSOHandle& ssoHandle)
2018-09-21T09:49:26.398|INFO |0HLGVHPDRFKDK-AppStartup|[OAuthTokenProvider] Environment is non-VDA. Attempting SAML SSO
2018-09-21T09:49:26.429|INFO |0HLGVHPDRFKDK-AppStartup|[GPO] Account name is set to company.sharefile.eu
2018-09-21T09:49:35.849|INFO |0HLGVHPDRFKDK-AppStartup|[OAuthTokenProvider] Saml SSO failed/not configured.
2018-09-21T09:49:35.849|INFO |0HLGVHPDRFKDK-AppStartup|[OAuthTokenProvider] Workspace is installed. Attempting workspace SSO
2018-09-21T09:49:35.865|INFO |0HLGVHPDRFKDK-AppStartup|[WorkspaceApp] Get token from workspace
2018-09-21T09:49:35.880|INFO |0HLGVHPDRFKDK-AppStartup|[WorkspaceApp] Workspace SSO response is null
2018-09-21T09:49:35.880|INFO |0HLGVHPDRFKDK-AppStartup|[OAuthTokenProvider] Silent login attempt. Webpop will not be shown.
2018-09-21T09:49:35.896|INFO |0HLGVHPDRFKDK-AppStartup|[SfWindowsApp] Login failed
2018-09-21T09:50:43.516|INFO |0HLGVHPDRFKDK-AppStartup|[PROXYHANDLER] User is not authenticated. Skipping proxy check.



When I press Log in button, SSO works.

2018-09-21T09:56:16.745|INFO |[PROXYHANDLER] User is not authenticated. Skipping proxy check.2018-09-21T09:56:19.973|INFO |[Connection] Connected to ShareFile
2018-09-21T09:56:19.973|INFO |[Connection]  -> True
2018-09-21T09:56:20.083|INFO |[GPO] Max Logs Folder size is not configured using default value
2018-09-21T09:56:20.894|INFO |[APP] RELEASE Version - 4.2.70.0
2018-09-21T09:56:20.894|INFO |[APP] OS Name: Windows 7, Version: 6.1
2018-09-21T09:56:20.894|INFO |[GPO] EnableApplication is set to 1 at HKEY_CURRENT_USER level
2018-09-21T09:56:21.112|INFO |[Analytics] StartTiming::App::launch_timing::<none>
2018-09-21T09:56:21.284|INFO |0HLGVHTB98DTO-AppStartup|[Analytics] StartTiming::App::launch_timing::<none>
2018-09-21T09:56:21.518|INFO |0HLGVHTB98DTO-AppStartup|[MainWindow]Initialized MainWindow
2018-09-21T09:56:21.518|INFO |0HLGVHTB98DTO-AppStartup|[DatabaseManager] Initializing global databases
2018-09-21T09:56:21.674|INFO |0HLGVHTB98DTO-AppStartup|[SfWindowsApp] Starting login
2018-09-21T09:56:21.689|INFO |0HLGVHTB98DTO-AppStartup|[DatabaseManager] Initializing global databases
2018-09-21T09:56:21.736|INFO |0HLGVHTB98DTO-AppStartup|[OAuthTokenProvider] Trying to get OAuth token using SSO authentication
2018-09-21T09:56:21.736|INFO |0HLGVHTB98DTO-AppStartup|[OAuthTokenProvider] Environment is VDA. Attempting VDA SSO
2018-09-21T09:56:26.821|ERROR|0HLGVHTB98DTO-AppStartup|[VdaSsoProvider] Unable to fetch sharefile sso handle --> 
System.TimeoutException: The operation has timed out.
   at System.IO.Pipes.NamedPipeClientStream.Connect(Int32 timeout)
   at ShareFile.Client.Windows.Cbfs.Auth.CitrixFilesAuth.SSO.Vda.VdaSsoProvider.TryGetShareFileSSOHandle(ShareFileSSOHandle& ssoHandle)
2018-09-21T09:56:26.821|INFO |0HLGVHTB98DTO-AppStartup|[OAuthTokenProvider] Environment is non-VDA. Attempting SAML SSO
2018-09-21T09:56:26.837|INFO |0HLGVHTB98DTO-AppStartup|[GPO] Account name is set to company.sharefile.eu
2018-09-21T09:56:27.851|INFO |0HLGVHTB98DTO-AppStartup|[OAuthTokenProvider] Saml SSO failed/not configured.
2018-09-21T09:56:27.851|INFO |0HLGVHTB98DTO-AppStartup|[OAuthTokenProvider] Workspace is installed. Attempting workspace SSO
2018-09-21T09:56:27.866|INFO |0HLGVHTB98DTO-AppStartup|[WorkspaceApp] Get token from workspace
2018-09-21T09:56:27.866|INFO |0HLGVHTB98DTO-AppStartup|[WorkspaceApp] Workspace SSO response is null
2018-09-21T09:56:27.866|INFO |0HLGVHTB98DTO-AppStartup|[OAuthTokenProvider] Silent login attempt. Webpop will not be shown.
2018-09-21T09:56:27.882|INFO |0HLGVHTB98DTO-AppStartup|[SfWindowsApp] Login failed
2018-09-21T09:56:35.853|INFO |0HLGVHTB98DTO-AppStartup|[PROXYHANDLER] User is not authenticated. Skipping proxy check.
2018-09-21T09:56:36.149|INFO |0HLGVHTB98DTO-AppStartup|[Connection] Connected to ShareFile
2018-09-21T09:58:08.587|INFO |0HLGVHTB98DTO-AppStartup|[PROXYHANDLER] User is not authenticated. Skipping proxy check.
2018-09-21T09:58:08.915|INFO |0HLGVHTB98DTO-AppStartup|[Connection] Connected to ShareFile
2018-09-21T09:58:18.415|INFO |[SfWindowsApp] Starting login
2018-09-21T09:58:18.415|INFO |[DatabaseManager] Initializing global databases
2018-09-21T09:58:18.415|INFO |[OAuthTokenProvider] Trying to get OAuth token using SSO authentication
2018-09-21T09:58:18.431|INFO |[OAuthTokenProvider] Environment is VDA. Attempting VDA SSO
2018-09-21T09:58:23.469|ERROR|[VdaSsoProvider] Unable to fetch sharefile sso handle --> 
System.TimeoutException: The operation has timed out.
   at System.IO.Pipes.NamedPipeClientStream.Connect(Int32 timeout)
   at ShareFile.Client.Windows.Cbfs.Auth.CitrixFilesAuth.SSO.Vda.VdaSsoProvider.TryGetShareFileSSOHandle(ShareFileSSOHandle& ssoHandle)
2018-09-21T09:58:23.469|INFO |[OAuthTokenProvider] Environment is non-VDA. Attempting SAML SSO
2018-09-21T09:58:26.418|INFO |[OAuthTokenProvider] Saml SSO failed/not configured.
2018-09-21T09:58:26.418|INFO |[OAuthTokenProvider] Workspace is installed. Attempting workspace SSO
2018-09-21T09:58:26.418|INFO |[WorkspaceApp] Get token from workspace
2018-09-21T09:58:26.418|INFO |[WorkspaceApp] Workspace SSO response is null
2018-09-21T09:58:26.418|INFO |[OAuthTokenProvider] SSO Authentication failed/not configured. Trying WebPop now
2018-09-21T09:58:27.217|INFO |0HLGVHTB98DTO-AppStartup|[PROXYHANDLER] User is not authenticated. Skipping proxy check.
2018-09-21T09:58:27.508|INFO |0HLGVHTB98DTO-AppStartup|[Connection] Connected to ShareFile
2018-09-21T09:58:31.873|INFO |Adding OAuth Credentials using oauthToken
2018-09-21T09:58:33.497|INFO |[Analytics] NewSession: sharefile.eu, sf-api.eu, company, Connection=Online
2018-09-21T09:58:33.517|INFO |Cleaning empty folders...
2018-09-21T09:58:33.529|INFO |[DatabaseManager] Initializing user databases
2018-09-21T09:58:33.728|INFO |[SfWindowsApp] Login finished successfully
2018-09-21T09:58:33.815|INFO |0 empty folder(s) deleted
2018-09-21T09:58:34.037|INFO |[GPO] Cache size is not configured
2018-09-21T09:58:34.101|INFO |[GPO] No mount points configured
2018-09-21T09:58:34.117|INFO |[ItemService] load: start
2018-09-21T09:58:34.141|INFO |[DirectoryEntryStore] Loaded 0 items and deleted 0 orphaned items out of 0 total items
2018-09-21T09:58:34.186|INFO |[ItemService] load: local items cached
2018-09-21T09:58:34.214|INFO |[LKRService] Loaded 0 known items, auto increment is starting at 0
2018-09-21T09:58:34.214|INFO |[ItemService] load: remote items cached
2018-09-21T09:58:34.214|INFO |[ItemService] load: done
2018-09-21T09:58:34.293|INFO |[MOUNT] mounting '\' to 'S:\'
2018-09-21T09:58:34.367|INFO |[MOUNT] successfully mounted S:\


Photo of Prabhat Tyagi

Prabhat Tyagi, Director, Product Engineering

  • 188 Posts
  • 9 Reply Likes
Thanks Aleksandras. The logs don’t really indicate core issue why the SAML login would fail if it’s configured properly. Since Drive Mapper works fine on the machine and with the same account, I would assume SAML configuration is not an issue.

Unfortunately we have not been able to reproduce it. At this time I would recommend you open a support ticket so that the issue can be closely investigated.

Cheers
Prabhat Tyagi
Photo of Aleksandras Artemjevas

Aleksandras Artemjevas

  • 32 Posts
  • 3 Reply Likes
Will do. Thanks for help :)
Photo of Prabhat Tyagi

Prabhat Tyagi, Director, Product Engineering

  • 188 Posts
  • 9 Reply Likes
Hi Aleksandras,

I am not sure if you opened a ticket yet. Just FYI, we have identified the issue and hope to provide a fix in one of the near future release.

Cheers
Prabhat Tyagi
Photo of Sabdil

Sabdil

  • 5 Posts
  • 0 Reply Likes
Hi, I am trying to set up the SSO for Citrix files using Netscaler Gateway as a IDP. The Citrix files version is 4.5.31.0, installed on a VDA environment, the SSO works but the autologon doesn't work. Users have to key in the username and password to login to the Citrix files, we are using the Citrix files for Onedrive Connector. Is there a workaround to get the auto-logon work, or is it a different version where this is fixed. Any help is really appreciated. We need to get this setup at the earliest. Thanks !
Photo of Chris Anderson

Chris Anderson, Product Manager

  • 349 Posts
  • 56 Reply Likes
Silent Auth / Passthrough / Integrated Windows auth, which i believe is what you are trying to achieve is dependent on two main things: 
1) The Account GPO being deployed, so we know where to send the user
2) The IdP being configured correctly on ShareFile to support passthrough / IWA. In your instance, using a Netscaler as an IdP, requires the NetScaler to be configured with Kerberos, which there is a document on the ShareFile knowledge base for this. 

It would be best to open a ticket with support though and they can look into it as well.
Photo of Sabdil

Sabdil

  • 5 Posts
  • 0 Reply Likes
Good Morning, Thanks for the response, Chris !

1) I have the Account GPO setup and after I set that up the Share File stopped prompting for the subdomain name, but it still prompts to the login window for user name and password.
2) I referred Download link to setup the Netscaler as as IDP. I don't see anything about the Kerberos configuration, that you are referring to. 
3) Also I have the support ticket opened and the first engineer told me the auto login is not supported in Netscaler as an IDP, I reopened the case and the second engineer told he will transfer it to Netscaler team for further analysis. 
Photo of Chris Anderson

Chris Anderson, Product Manager

  • 349 Posts
  • 56 Reply Likes
Hey Sabdil

Give the NetScaler AAA and Kerberos KCD/NTLM Fallback document a try, found on this KB article: https://support.citrix.com/article/CTX208557 (under additional configurations). Alternatively, here is the direct ShareFile link: Download

Photo of Sabdil

Sabdil

  • 5 Posts
  • 0 Reply Likes
Hi Chris,
Awesome, I am sure I saw this document but just din't give a try yet. I will try that now and will keep you posted. Thank you for your help !
Photo of Aleksandras Artemjevas

Aleksandras Artemjevas

  • 32 Posts
  • 3 Reply Likes
Hi,
Yes, I opened a ticket. Glad to hear that.
Thanks for the info :)
Photo of Sabdil

Sabdil

  • 3 Posts
  • 0 Reply Likes
Hi Aleksandras, 

Did you got it fixed with he support call. I am facing the same problem with the auto-logon for the Citrix files for Windows.