Multiple account authenticated in AD with clientless SSO

Good day all,

We are having issues on the clientless SSO that there's multiple account hoping around the end user.

Below are the scenario

1) Multiple account sign-in

I have login with my AD account and it can be seen authenticated on the AD and XG, but when i open my email which running at exchange environment there's another AD account for my department group login as well. I found out if there's multiple email account, all the account there is being pickup by the SSO.

2) Domain admin account login on randomly

I have discovered that the domain administrator account are randomly login to the client PC, it is normal that we found on server but it is abnormal we discover it happen on the client PC.

3) Inaccurate on reporting due to multiple account on a client PC with same IP

As with multiple account being sign in on the client PC, when the user access internet, it doesn't using the user account to carry out the task but other account.

I believe this could be the miss configured on the STAS but my vendor has claim that this is an AD issue and my AD is showing healthy after i done a dcdiag /c on both my AD.

Hopefully some experts at here can enlighten me on how to resolve these issues.

Best regards