You can configure a user to enable the single sign-on feature of Novell® Access Manager when accessing published Citrix Applications through SSL VPN. To enable single sign-on, you must configure a custom-login policy and protect the Citrix Application Server with the Access Gateway. If you are using the ESP-enabled Novell SSL VPN, you must install an Access Gateway in order to protect the Citrix server. The following sections discuss the configuration process: