When trying to connect to a XenDesktop 7.6 and StoreFront 2.6 based environment from internal computers through NetScaler you could receive the following error in your StoreFront server's Citrix Delivery Services Event Log, Source: Citrix Store Service, Event ID: 23: Gateway data from the request and the authentication token are not matching. Request was made to store 'Store Service':
This only happened while implementing the latest versions of StoreFront (v2.6) and NetScaler (v10.5 and v11), and trying to configure a 'Store' in Citrix Receiver 4.3 (with SSON enabled) on domain member computers. And at first glance it doesn't seem to pose any problems, except: all of a sudden you have to authenticate for a second time!
In order to remedy this issue remove your NetScaler 's SNIP or MIP from General Settings under the NetScaler Gateway node in the StoreFront MMC:
Furthermore make sure the correct Authentication Method is enabled on both your Authentication as well as Receiver for Web node in StoreFront, i.e. enable the corresponding Pass-through from NetScaler Gateway authentication option:
After that dual prompts for authentication shouldn't appear anymore.
Further reading: