Citrix Director becomes unresponsive after accepting user credential when X-Frame-Options is enabled in IIS

  1. On Citrix Director server, update web.config file located in “C:inetpubwwwrootDirector” with following content.

    <system.serviceModel> <serviceHostingEnvironment multipleSiteBindingsEnabled="true" aspNetCompatibilityEnabled="true" />
  2. If X-Frame-Options custom header is enabled, update the web.config file with following.

    <httpProtocol> <customHeader> <add name="X-Frame-Options" value="ALLOW-FROM http://localhost/director/default.html" /> ​ </customHeaders></httpProtocol>

Note: These two entries are needed only if IIS MultiSiteBinding is enabled and X-Frame-Options custom header is configured. In a single domain/single site environment, only step 1 is needed.

In a multi-domain, multi site IIS environment, with X-Frame-Options custom header enabled the multipleSiteBindingsEnabled should be set to True.


In a single domain, enabling the “multipleSiteBindingsEnabled may cause a “Server Error in ‘/Director’ Application” error when trying to open the Citrix Director Logon page. It is recommended to enable “multipleSiteBindingsEnabled” only in an IIS environment with multiple sites and multi domains.


  • No Related Posts

Leave a Reply