Before enabling secondary authentication, you must ensure that you have performed all the configuration steps in the same order as mentioned in Section 4.2.3, Checklist to Follow Before Enabling Secondary Authentication. If Advanced authentication server is not configured, there will be issues when users try to login or try to get privileged access for an endpoint.
You can enable Advanced Authentication feature for the following:
Authentication: Administration and User consoles
Authorization: All consoles, Windows and SSH terminal access