Using ASG Client from AADJ device with federated accounts to existing Onprem DB

[ASMahler]

I think you have to add your Azure AD to the "Domains" in Settings-Domains - then you can choose Accounts/Groups from that Domain in Permissions

When I talk about Azure AD i doesn´t mean a classic onprem active directory, it is the azure active directory in the Micrsosoft Cloud.
The computers are not joined into the classic domain, only to the cloud. The users still have a valid kerberos ticket for authentficiation.
But the ASG-RD client isn´t using it.