From his comment it seems like they use a service account and thus hardcoded username + password on the Guacamole side rather than doing what Citrix does