1. Go into Citrix Gateway > Policies > Traffic
  2. Click the Traffic Profiles tab, and click Add

  1. Enter a Name
  2. Configure the SSO user expression as http.req.user.attribute(1) 
  3. Configure the SSO password expression as http.req.user.attribute(2).B64DECODE 
  4. Click Create at the bottom.
  5. Ignore the following warning. Just hit OK