This message was deleted.

Is this a Citrix Cloud deployment?

Yes, exactly. Guess it's related to https://support.citrix.com/article/CTX253779

In the past you had to contact Citrix Support to enable the flag for SSO, maybe they turned it on by default.

Yes, this was done for this customer. So users with a Domain Joined client don't need to authenticate again when starting a published App. Awesome, but sometimes there is the need to disable this on a per client basis or at least make it possible to select another account.

You could use the browser based access for this

Sure, can be done with a browser. But you may know these few but very persistent users how do not accept this as an answer. 😉 Thanks for your help!

Lol yeah I know them too well…