Computer Configuration > Administrative Templates > Citrix Components > Citrix Workspace > User authentication
Machine
HKLM\Software\Policies\Citrix\AuthManager
When the policy is disabled, single sign-on (SSO) is disabled for devices that are Entra ID-joined or registered. The end user must authenticate in the Workspace app if Entra ID is used as the identity provider. When the policy is not configured, single sign-on (SSO) is enabled. By default,policy is enabled.