Skip to content
Was this article helpful?

API functions

The API provides four functions to enable the use of SSO:

  • LogonSSOUser
  • LogonSSOUserWithPin
  • LogoffSSOUser
  • IsReconnectioninProgress

LogonSsoUser

LOGONSSOUSER_ERROR_CODE APIENTRY
LogonSsoUser (
   MSV1_0_INERACTIVE_LOGON  pNewCredentials,
   BOOL   notUsed,
   BOOL  notUsed2,
   DWORD  *pDwResult
  )

This function is used to provide user credentials to SSO. If this function is invoked from a service, the service should be able to call these APIs in the locally logged-on user’s session.

Parameter Description
pNewCredentials This parameter is a pointer to the MSV1_0_INTERACTIVE_LOGON structure, which provides the users credentials to SSO. See Microsoft documentation for further details on this structure.
notUsed, notUsed2 These parameters are deprecated.
pDwResult Pointer to a DWORD to contain the result code of this operation.
Return value Description
LOGONSSOUSER_OK Operation completed succesfully.
LOGONSSOUSER_UNABLE_TO_GET_PIPE_NAME Error communicating with SSO.
LOGONSSOUSER_UNABLE_TO_CONNECT_TO_SSO Error communicating with SSO.
LOGONSSOUSER_UNABLE_TO_SEND_REQUEST Error communicating with SSO.
LOGONSSOUSER_INVALID_RESPONSE Error in SSO response.

LogonSsoUserWithPin

BOOL APIENTRY DoLogonSsoUserWithPin
 (
 const wchar_t* pin
 )

This function is used to provide smart card user credentials to SSO.

Parameter Description
pin The smart card PIN
Return value Description
BOOLEAN TRUE if operation completed successfully, FALSE otherwise.

LogoffSSOUser

DWORD APIENTRY
LogoffSsoUser(
 DWORD  notUsed
  )

This function removes the credentials of the current SSO user and restores the previous user’s credentials if available.

Parameter Description
notUsed This parameter is deprecated.
Return value Description
LOGONSSOUSER_OK Operation completed succesfully.
LOGONSSOUSER_UNABLE_TO_GET_PIPE_NAME Error communicating with SSO.
LOGONSSOUSER_UNABLE_TO_CONNECT_TO_SSO Error communicating with SSO.
LOGONSSOUSER_UNABLE_TO_SEND_REQUEST Error communicating with SSO.
LOGONSSOUSER_INVALID_RESPONSE Error in SSO response.

IsReconnectInProgress

DWORD APIENTRY
IsReconnectInProgress
  (
 DWORD dwTimeout,
 LPBOOL lpReconnectInProgress
)

This function works with auto client reconnect to determine whether a reconnect is being attempted after the last logon using LogonSsoUser(). You must call it immediately after LogonSsoUser. If there is a session to reconnect, the auto client reconnect feature issues the reconnect request. The API communicates that a new reconnect request has been issued; therefore no new session launch request is needed.

The function detects only whether a reconnect request has been attempted. It cannot detect whether the reconnect succeeded or failed.

For this function to operate successfully for the Web Interface, you must enable the XenApp Services site setting Automatically reconnect to sessions when users log on.

Parameter Description
dwTimeout The maximum number of millisconds to wait to determine whether a reconnect is in progress.
lpReconnectInProgress Points to a flag that is set to TRUE if the reconnect request was launched after the last logon or to FALSE if there was no session to reconnect.
Return value Description
ERROR_SUCCESS Operation completed successfully
ERROR_TIMEOUT The timeout period expired or another relevant error code was issued.
Was this article helpful?