You’ve configured SAML authentication on your netscalers for your Citrix gateway or configured FAS in your environment. After you login to the gateway and logoff from the gateway or storefront url, when you try to login again on the same browser or same tab, you might end up in the error, “You cannot login using smartcard. Please close this browser to protect your account”.

There are multiple solutions to this issue.

Solution 1

Adding setting “CTXS.allowReloginWithoutBrowserClose = true " to C:\inetpub\wwwroot\Citrix<StoreName>Web\custom\script.js.

Steps: 1.In StoreFront server ,move to C:\inetpub\wwwroot\Citrix<StoreName>Web\custom . 2.Right Click script.js ,and add below content to the end of the file. CTXS.allowReloginWithoutBrowserClose = true 3.Save the file. 4.Run command “iisreset” .

Solution 2 - Applies to ADC scenario only

Steps:

1. In the ADC server, move to /var/netscaler/logon/LogonPoint/custom/script.js
2. Right Click script.js ,and add below content to the end of the file. CTXS.allowReloginWithoutBrowserClose = true 3.Save the file.

Source

Out of these two solutions, solution 1 is more reliable because when you upgrade your netscaler, the firmware you upgrade to, might overwrite the script.js file on netscaler. So, you might have to change it again and again when you upgrade your netscaler firmware.