For Entra SSO, this setting regarding AzureADSSOEn...
# citrix-daasc
Corey Tracey
08/13/2026, 6:03 PMFor Entra SSO, this setting regarding AzureADSSOEnabled being globally applied to all stores;
This is a global setting that will be applied to all the stores in your Citrix Cloud tenant. At this time, it is not possible to enable or disable this setting on specific stores based on the store URL provided in the command.
Does this impact other delivery groups? If we use FAS now and want to POC this AzureADSSO, can we have some DG using Azure and others using FAS? Does AzureADSSOEnabled at the Store level affect other delivery groups?
m
Miguel Contreras
08/24/2026, 6:04 PMHey Corey. Yes, this is a global setting, but it's only to enable the capability in Workspace, not to actually set the logon type for any delivery groups
Miguel Contreras
08/24/2026, 6:05 PMIn a nutshell, when this is disabled, Workspace doesn't include in the ICA file the necessary info that CWA needs to do Entra SSO. Enabling it tells Workspace to include the info if provided during session brokering
Miguel Contreras
08/24/2026, 6:06 PMAny DGs that you have that use FAS for SSO will continue to use FAS
Miguel Contreras
08/24/2026, 6:08 PMUltimately what will determine whether FAS or Entra SSO is used for a specific session is the
Machine Logon TypeAzureADHybridAzureADMiguel Contreras
08/24/2026, 6:09 PMStarting with VDA 2607, you can also use a new policy setting where you can enable/disable Entra SSO via Citrix policy (this doesn't replace the Workspace global setting)
c
Corey Tracey
08/24/2026, 6:15 PM@Miguel Contreras perfect, exactly the information I was looking for. thanks!