hello
please give me the right response of this question
It is the Authentication Client.
Because SSO does not inform the XG, there is a new Client logged in. STAS would do it, but not an "plain" AD Server.