According to the Citrix documentation, "When you configure the Citrix ADC appliance for Active Directory authentication, you must configure DNS to assign fully qualified domain names (FQDNs) to the authentication and traffic management virtual servers. This is because the domain session cookie that is used during authentication is based on the FQDN of the virtual server." 1 1: Configure DNS to Support Active Directory Authentication