This message was deleted.

DNS, auth methods on Storefront, ensure that the domain is case matched on NSGW and Storefront. Past that I'll point to individual storefront servers to see if it's a particular server or the server group

Thanks Ben, funny enough, I'm working on the next version of the Automation Master Class 🙂

Nice, I've been playing around with Packer and Terraform some. Some really slick automation tools there

look at the session policies n the gateway and see if they are passing through a domain, look at storefront to see if you are limiting the domains you accept

Jep Citrix Delivery Services Eventlog at storefront will give you the info why SSON isn’t working

Also dont forget there is a SSO profile that you have to add now in later builds as SSO is treated as insecure if its not set then you'll get a cannot complete your request message. https://vhorizon.co.uk/citrix-adc-13-64-35-cannot-complete-your-request-error/

Check that Pass through from Netscaler auth method is enabled on SF store, Trusted domain set on SF store, in your session profile also check single sign on to web applications is ticked under client experience, then check single sign on domain under published applications matches the domain you have set on the trusted domains in SF

Thanks all. @Dale Scriven that might be the issue, this IoC code was working 2 years ago. @Benjamin Crill case sensetive domain, interesting cause I see upercase in SF while my XML for Netscaler config has lower case. This is 12.x cause newer releases req password change which I think is not handle by @Dave Brett NS module.

It’s not. But it will be .... 😁