Before enabling secondary authentication, you must ensure that you have performed all the configuration steps in the same order as mentioned in Section 5.2.3, Checklist to Follow Before Enabling Secondary Authentication. If Advanced authentication server is not configured, there will be issues when users try to login or try to get privileged access for an endpoint.
You can enable advanced authentication feature for authenticating users who access the following:
Administration console
Host servers such as Windows, SSH.
Applications or database by retrieving Passwords or shared keys from the user console