Citrix XenApp™ Single Sign-on, powered by Citrix Password Manager™, increases application security for password-protected applications delivered through XenApp. Organizations can now centralize password management for greater IT control, while users experience the productivity gains of fast, automated logons to Web, Windows® and host-based applications.

Single Sign-On strengthens application security and eliminates the security breaches that are common when users have more passwords than they can manage. It simplifies user access, facilitates regulatory compliance and is easy to deploy and use. Single Sign-On does not require scripting, application-level integration or significant changes to existing IT infrastructure.

Single Sign-on with XenApp

Strengthen application security and facilitate regulatory compliance

• Password policy enforcement – Enables IT to strengthen application passwords by specifying password requirements such as length, character repetition and alphanumeric composition on a per-application basis. This eliminates the risks of users creating weak passwords which can easily be guessed or hacked.
  
• Batch credential provisioning – Use the batch credential provisioning tool to pre-populate the system with users’ secondary credentials. This allows IT administrators to roll out new applications without insecure credential distribution. It also eliminates this task for first time users.
  
• Transparent password change – Changes passwords without requiring user intervention. Passwords remain hidden from users and only the primary network logon needs to be deactivated to de-provision user access.
  
• Password expiration – Administrators can force regular and transparent password changes, even on legacy applications that do not have periodic password change functionality.
  
• Cryptographic data integrity assurance – Password Manager provides an additional layer of security control by using cryptographic signing to ensure the integrity of configuration settings and policies read by the Password Manager plugin, protecting against man-in-the-middle and phishing hacker attacks.
  

Simplify user access and improve productivity

• Fast, automated logon – Requires users to log on only once with their network credentials and automates subsequent logons to applications accessed through a Web browser, Windows client or host terminal emulator to increase employee productivity and user satisfaction.
  
• Self-service password reset and account unlock – Allows users to reset their domain password or unlock their Windows account from their PC, which further reduces help desk costs for password resets.
  
• Hot desktop fast user switching – Enables users who share workstations to logon/logoff in seconds instead of using a time-consuming, full Windows or Novell log on/log off procedure.  Hot desktop improves user productivity, provides more seamless access to IT resources, and eliminates generic logon accounts to improve employee accountability.