Citrix DaaS: Entra Domain Services logon requires UPN with original domain name
Summary
Citrix documents a known issue for Citrix DaaS environments that use Microsoft Entra Domain Services. End user logons only work with a UPN (user principal name) that contains the domain name specified when Microsoft Entra ID Domain Services was enabled. Logons with a UPN of a custom domain are not possible. The issue is confirmed by the vendor and no fix is announced.
Symptoms
Logons using a UPN of a custom domain you created fail, even if that custom domain is designated as primary. The source gives no error codes or messages.
Affected
- Citrix DaaS with Microsoft Entra Domain Services
- End users who log on with a UPN of a custom domain
Workaround
- Have end users log on with a UPN that contains the domain name specified when enabling Microsoft Entra ID Domain Services.
Fix
Not fixed yet.
Recommendation
Check which UPN suffix your users use to log on to Citrix DaaS. Have users in Entra Domain Services environments log on with the UPN containing the originally specified domain name, and take this into account before introducing custom domains.
Sources
- Citrix DaaS: bekannte Probleme Vendor · docs.citrix.com
Compiled from the sources listed and translated with AI (Claude); status and dates come from the vendor. The vendor’s statements are authoritative. Updated 1 Nov 2026, 23:54.
Where the information comes from
We continuously read the vendors’ official sources, community reports and trade media and summarise them in our own words, with a link to the source:
- Microsoft: Windows release health (Windows 10/11, Server 2016 to 2025), Windows message center, known issues of Microsoft 365 Apps (Outlook, Excel, Word, PowerPoint), Edge, Intune, Autopilot, Windows 365 and Entra Connect, Microsoft KB articles with timelines, Exchange and Windows IT Pro blogs, optionally Microsoft 365 service health and message center
- other vendors: Veeam KB, Citrix (known issues), Ubuntu and Debian (regressions), Broadcom (VMware), Fortinet, Cisco, Mozilla, Let’s Encrypt
- community (title, short excerpt and link only, without the names of the authors): Microsoft Q&A, Microsoft Tech Community (discussions), Veeam R&D Forums, Eleven Forum
- targeted web research with AI (Claude), e.g. on the updates of the month – this also finds discussions on Reddit and in forums; such entries are labelled as community reports until the vendor confirms them
- early warning from trade media (title and link only): Born’s Tech and Windows World, BleepingComputer, AskWoody, Windows Latest, Windows Central, gHacks, The Windows Club, Deskmodder, Dr. Windows, WindowsArea, Frankys Web, heise online
Summary and translation with AI (Claude by Anthropic) – without any data of visitors.
Affected? We can help.
We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.