This article describes how to disable Single Sign-On in NetScaler.
In XenMobile, in some use cases the app may want to perform NTLM authentication of a user that was not used during enrollment. In such situation, the app uses Full Tunnel mode and so would like to send the credentials itself. If Single Sign-On (SSO) is ON in NetScaler, then the NetScaler will try to perform the authentication using the enrolled user credentials when the backed server asks for credentials. However, that is not what we want in this use case. So, we will need to disable SSO in NetScaler so that the app can provide the credentials and complete the NTLM authentication.