Citrix Secure Access
Citrix Secure Access enables enterprise resources access anywhere anytime
Citrix Systems, Inc · com.citrix.CitrixVPN
UpdatedApr 19, 2026
PublishedJan 15, 2021
Packagecom.citrix.CitrixVPN
MD516164d7e0d8b16bd946b899d2bdf0dba
SHA1 (signer)4B:50:0F:C4:C2:68:5C:1B:F2:62:77:AF:83:32:B2:9C:32:36:69:29
Signed byCN="Citrix Systems, Inc.", OU=Citrix_Android_Apps, O="Citrix Systems, Inc.", L=Santa Clara, ST=California, C=US
Architecturesx86, x86-64, armeabi-v7a, arm64-v8a
Malware scanTRUSTED
Contact[email protected]
Privacy policyView
What's new
- Enhance Always On VPN restart
- Fix Always On VPN stuck in reconnect loop
- Fix AO VPN and Intune NAC interaction
- Misc stability fixes
NOTE: MDM admins are advised to allow POST_NOTIFICATIONS permission and set "IsAlwaysOnVpn" to True in managed configuration for the Always-On VPN profile.
For documentation about new features, see What's new in Citrix SSO for Android release notes at https://docs.citrix.com/en-us/citrix-gateway/citrix-gateway-clients/citrix-sso-release-notes-android.html
- Fix Always On VPN stuck in reconnect loop
- Fix AO VPN and Intune NAC interaction
- Misc stability fixes
NOTE: MDM admins are advised to allow POST_NOTIFICATIONS permission and set "IsAlwaysOnVpn" to True in managed configuration for the Always-On VPN profile.
For documentation about new features, see What's new in Citrix SSO for Android release notes at https://docs.citrix.com/en-us/citrix-gateway/citrix-gateway-clients/citrix-sso-release-notes-android.html
Description
Citrix Secure Access (formerly Citrix SSO) app enables secure access to business critical applications, virtual desktops, and corporate data from anywhere at any time, providing an optimal user experience with the NetScaler Gateway.
Secure Access features:
• Full layer 3 TLS connectivity to NetScaler Gateway using Android VpnService framework
• Per-app connection flexibility (Provisioning support through MDM systems)
• Android Enterprise managed configuration support
• Always-On connection support with client certificate on Android 7.0+
• Multi-factor authentication support with client certificate
• Seamless session maintenance during network changes
• Multi-language support
• Built-in support for emailing logs
One Time Password (OTP) features:
• One Time Password generator using TOTP protocol
• Add/manage OTP tokens using QR Code
• Second factor authentication using push notifications
• Multi factor authentication with biometrics support on Android 6.0+
Requirements:
Credentialed access to a NetScaler Gateway installation with release 10.5 or later. Please contact your organization’s IT group for connection information.
Citrix Secure Access app in a managed Work Profile or Device Profile:
• If you are deploying Citrix Secure Access app in a managed Work Profile or Device Profile, it uses QUERY_ALL_PACKAGES permission. This permission is used by enterprise administrator to provision managed VPN configurations. A managed VPN configuration allows controlled access to the VPN session from specific applications on your Android device from the Work Profile or the Device Profile. It is also advised to pre-grant POST_NOTIFICATIONS permission to Citrix Secure Access app so that it can show VPN status and Push notifications to the user on Android 13 and later devices.
Typically, Citrix Secure Access app does not collect any personally identifiable data from managed Work Profile. No information from personal profile is accessed.
Languages:
Citrix Secure Access app supports English, German, French, Spanish, Simplified Chinese, and Japanese languages
Help docs:
https://help-docs.citrix.com/en-us/citrix-sso/citrix-sso-for-android/use-sso-app-from-your-android-device.html
Secure Access features:
• Full layer 3 TLS connectivity to NetScaler Gateway using Android VpnService framework
• Per-app connection flexibility (Provisioning support through MDM systems)
• Android Enterprise managed configuration support
• Always-On connection support with client certificate on Android 7.0+
• Multi-factor authentication support with client certificate
• Seamless session maintenance during network changes
• Multi-language support
• Built-in support for emailing logs
One Time Password (OTP) features:
• One Time Password generator using TOTP protocol
• Add/manage OTP tokens using QR Code
• Second factor authentication using push notifications
• Multi factor authentication with biometrics support on Android 6.0+
Requirements:
Credentialed access to a NetScaler Gateway installation with release 10.5 or later. Please contact your organization’s IT group for connection information.
Citrix Secure Access app in a managed Work Profile or Device Profile:
• If you are deploying Citrix Secure Access app in a managed Work Profile or Device Profile, it uses QUERY_ALL_PACKAGES permission. This permission is used by enterprise administrator to provision managed VPN configurations. A managed VPN configuration allows controlled access to the VPN session from specific applications on your Android device from the Work Profile or the Device Profile. It is also advised to pre-grant POST_NOTIFICATIONS permission to Citrix Secure Access app so that it can show VPN status and Push notifications to the user on Android 13 and later devices.
Typically, Citrix Secure Access app does not collect any personally identifiable data from managed Work Profile. No information from personal profile is accessed.
Languages:
Citrix Secure Access app supports English, German, French, Spanish, Simplified Chinese, and Japanese languages
Help docs:
https://help-docs.citrix.com/en-us/citrix-sso/citrix-sso-for-android/use-sso-app-from-your-android-device.html
Required features
- Wifi android.hardware.wifi
Permissions (16)
Citrix Secure Access requests the following Android permissions:
- Access Network State android.permission.ACCESS_NETWORK_STATE
- Access Wifi State android.permission.ACCESS_WIFI_STATE
- Camera android.permission.CAMERA
- Foreground Service android.permission.FOREGROUND_SERVICE
- Foreground Service System Exempted android.permission.FOREGROUND_SERVICE_SYSTEM_EXEMPTED
- Hide Overlay Windows android.permission.HIDE_OVERLAY_WINDOWS
- Internet android.permission.INTERNET
- Post Notifications android.permission.POST_NOTIFICATIONS
- Query All Packages android.permission.QUERY_ALL_PACKAGES
- Read Phone State android.permission.READ_PHONE_STATE
- Receive Boot Completed android.permission.RECEIVE_BOOT_COMPLETED
- Use Biometric android.permission.USE_BIOMETRIC
- Wake Lock android.permission.WAKE_LOCK
- Com Citrix Citrixvpn Dynamic Receiver Not Exported Permission com.citrix.CitrixVPN.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
- C2dm Permission Receive com.google.android.c2dm.permission.RECEIVE
- Finsky Permission Bind Get Install Referrer Service com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE
