Authentication client

Question

I have 2 unit of Sophos XG 125 running on SFOS 16.05.5 MR5 . Both of this unit is being deploy at different site and the user list for authentication is same for both site. User authentication is done locally in sophos no AD involve. My question here is 
 1. When the user go from site1 to site 2 can the Authentication client being use for both of the sophos unit (Universal authentication client?) 
 2. Is there is any difference in the installer when downloading from user portal or admin console? 
 3. Having an issue where sometimes the authentication client show "Could not validate certificate! CAA will now close"

lferrara · Accepted Answer

Kent Saa uses certificates to authenticate users, combined with user's password. Each user has its own certificate so saa won't work from one XG to another. You can open a feature request where user can have more than one certificate attached, where admins can upload certificates and attach to users. 
Post the feature on ideas.sophos.com