【NGAF】Application Control not Working When Choose User/Group
Issue Description
User use AD SSO authentication policy. Application control not working when source object choose specific user/group:

Handling Process
- Change to network object then the policy work normally.
- Check the authentication policy found the authentication zone didn’t select any zone.

- Select the zone that use AD SSO authentication then policy start working.
Root Cause
The authentication policy does not select zone, and no user participates in the authentication, so that the application control policy cannot match the authenticated user.
Solution
In the authentication policy select the zone.
