Active Directory Setup

Question

Hello All 
 Installing an XGS126w for a client and in the process of setting up AD Authentication, just to clarify do I require the STAS to be installed on the AD server? 
 Also do I need the Client Authentication Agent to be installed too if STAS is installed? 
 Currently have AD setup in the XGS but wondering what other steps am missing? 
 Thank you

FormerMember · Answer

Hi, Thanks for reaching out to Sophos Community. 
 STAS is required only when you require an SSO to authenticate users. Basically, with STAS, Users get authenticated when they login into their Machines which are enrolled into Active Directory. 
 If you want to use Client Authentication Agent with AD users, You won't need STAS. Simply integrate AD, Select AD server in "Firewall authentication methods" (Authentication > Services), Install CAA in the end machines and you're good to go!