This message was deleted.

You got all the pre reqs for smartaccess enabled ? Trustrequestssenttoxmlserviceport enabled and callbackurl specified on your NS GW appliance and GW Vserver in smartaccess mode and universal CCU licenses

I think you also have to configure the Citrix ADC callback URL in the Storefront configuration.

Callback url for single fqdn must also be different than the single fqdn

Thanks guys that's exactly what I was looking for - both the Smartaccess stuff and the callback info.