• Citrix and Microsoft
• Nov 19, 2025

The missing link in passwordless simplicity

The path to a passwordless world has been clear for years: simplify access, strengthen security, and eliminate friction. Microsoft Entra ID Single Sign-On (SSO) has led that transformation through modern authentication, Microsoft Entra Conditional Access, and adaptive MFA.

But inside virtual desktops, the experience broke down. On their physical endpoint, users could sign in to Microsoft 365 with Microsoft Entra ID (SSO), but once inside a Citrix DaaS session, identity context was lost. IT teams had to maintain separate identity policies, increasing friction for users and complexity for IT.

Citrix + Microsoft: Closing the gap for good

That changes now. Citrix has brought Microsoft Entra ID SSO into the Citrix session, delivering one identity and one sign in across every app and desktop.

No more workarounds. No more extra prompts. Just a seamless, passwordless experience that feels natural to every user, whether they’re signing in to Microsoft 365 or any business application hosted by Citrix.

All your Microsoft Entra ID policies follow the user into the Citrix environment. Conditional Access, MFA, compliance and governance remain intact. IT maintains control while users move freely, securely, and efficiently. IT doesn’t need to replicate policies or manage additional identity layers. Users authenticate once, and the security posture stays with them.

The result: stronger security, simpler operations, and a consistent passwordless experience that just works.

See it in action: One sign in, end to end

Picture this. You open your laptop, sign in once with Microsoft Entra ID SSO, and that single authentication unlocks everything: your Citrix Workspace, your business apps, and the secure desktop where you work.

You launch your Citrix virtual session, no second password prompt. No MFA loop. Every app inside recognizes you instantly as the same trusted user.

Behind the scenes, IT has not added another identity system. The existing Microsoft Entra Conditional Access rules, MFA requirements, and compliance policies simply extend into the Citrix environment. Security stays consistent, and the user experience stays invisible.

This is a truly passwordless workspace that feels effortless for Citrix users and reduces risk for IT. One sign in, one policy framework, one trusted identity from device to virtual desktop to cloud application.

Why this matters for IT

• Unified governance: One identity source across Citrix local, cloud, and virtual apps means fewer exceptions and less policy drift.
• Reduced overhead: Eliminates the need for duplicate identity providers or customer SSO plugins for Citrix.
• Improved security posture: Microsoft Entra Conditional Access and MFA rules now apply inside the Citrix sessions, reducing lateral movement risks.
• Better user experience: True passwordless access from Citrix device sign in to app launch.

Experience it for yourself

This integration isn’t theoretical; it’s live and ready. See it in action at Microsoft Ignite, booth #4013, and discover how Citrix and Microsoft are redefining secure, unified access.

Or connect with your Citrix partner team to start your rollout. With one identity for every app and desktop, you can deliver the simplicity users love and the security your business requires.

Shawn Bass

Shawn Bass is SVP & GM of VDI and DaaS at Citrix.