Computer Configuration > Administrative Templates > Citrix Components > Citrix Workspace > User authentication
Machine
HKLM\Software\Policies\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Logon\Local Credentials
This policy allows Citrix Workspace app to use Enhanced Domain passthrough for single sign-on. When this policy is enabled, the sign-in credentials (pass-through authentication) from the local machine are used to authenticate to the remote server without exchanging the actual username and password. This policy requires VDA version 2308 or later.