NetScaler AlwaysOn SSLVPN. Machine Tunnel is working fine during Notebook-Boot. Users are logging on using a shared (the same) AD-Account. By default, the Machine Tunnel gets transferred to User Tunnel by seamless tunnel establishment. I want to disable that, so the User has to enter their (different) AD-Account for establishing the User Tunnel. Here's only the description which authentication methods are supported by seamless auth but not how to disable SSO, any ideas? https://docs.netscaler.com/en-us/citrix-gateway/current-release/vpn-user-config/alwayson.html#understanding-the-always-on-framework