Hi,
As shown in the following figure, an SSO authentication process usually involves four basic
elements, namely, the client device, AD domain controller, FW gateway, and Internet agent.

Figure: AD SSO
Client: Before network access, AD domain authentication is performed first. After the
authentication is passed, network access is implemented through the FW gateway.
AD domain controller: It serves as the authentication system and authenticates all clients
before they access the network.
FW gateway: It serves as the egress gateway and permits the traffic of authenticated clients.

