Changes made on client workstations when the Citrix Virtual Channel Support is selected during SecureLogin client installation

  • 7940318
  • 19-Aug-2009
  • 26-Apr-2012

Environment

SecureLogin SSO

Situation

What changes are made on client workstations when the Citrix Virtual Channel Support is selected during SecureLogin SSO client installation?

Resolution

During installation, SecureLogin detects whether or not the Citrix ICA Client is installed. If it is, it will install the Citrix Virtual Channel Support by default and make a number of changes to the workstation.

The virtual channel is used to launch slproto.exe for published applications. When a user running the ICA client on their workstation launches a published application on the Citrix server, slproto.exe, is sent down the virtual channel from the server and is loaded on the client workstation.

In addition, to re-authenticate the user to the Citrix server automatically after they logged on to AD or Novell eDirectory (depending on your environment), SecureLogin performs GINA to GINA pass through. Unlike published application support, this feature is only available if SecureLogin is installed on the client workstation.

The process works like this:

  1. In a Microsoft Client environment (e.g. ADS logon) SLCREDMAN.DLL retrieves the Username and Password the user entered into their Microsoft Client logon screen, and stores them in a hidden and encrypted SecureLogin platform.
  2. In a Novell Client environment (e.g. eDirectory logon) the Novell client logon extension SLINA.DLL retrieves the Username and Password the user entered into their Novell Client logon screen, and stores them in a hidden and encrypted SecureLogin platform.
  3. Once the credentials have been captured, VDSLSSON.DLL sends the logon credentials down the virtual channel so the user is not prompted to logon to the Citrix server (they may be prompted to logon to the Citrix Program Neighborhood but this can be SSO enabled).

To facilitate the GINA to GINA pass through, VDSLSSON.DLL is automatically copied into the Citrix ICA client program directory and is registered in the modules.ini file by the installer as per the following;

  • SLSSO appears (typically at the end) in the VirtualDriver Key of the [ICA 3.0] section. i.e.

[ICA 3.0] VirtualDriver = SLSSO

  • SLSSO= appears under the [VirtualDriver] section i.e.

[VirtualDriver] SLSSO=

  • VDSLSSON.DLL appears in the DriverNameWin32 key of the [SLSSO] section i.e.

[SLSSO] DriverNameWin32=VDSLSSON.DLL

Additional Information

SecureLogin supports both Citrix published applications and published desktops.