It looks like Citrix has broken proxy config for AppController v9 in Hotfix Rollup Pack 5
If you have a proxy configured for outbound traffic from AppController and AppController can’t talk to the internet directly you will get an error message “Failed to get ShareFile authentication ID” after clicking on Apps & Docs.
Due to this AppController will not be able to connect to sharefile to synchronise user lists, therefore you may see issues with user provisioning or SSO for new users.
EDIT: Same issue also exists in HRP 6