Scenario: A Citrix Architect holds a design discussion with a team of Workspacelab members, and they capture the following requirements for the Citrix ADC design project:

A pair of Citrlx ADC MPX appliances will be deployed in the DMZ network and another pair in the internal network.

High availability will be accessible between the pair of Citrix ADC MPX appliances in the DMZ network.

Multi-factor authentication must be configured for the Citrix Gateway virtual server.

The Citrix Gateway virtual server is integrated with the StoreFront server.

Load balancing must be configured for the StoreFront server. •Authentication must be deployed for users from the workspacelab.com domain.

The Workspacelab users should be authenticated using Cert Policy and LDAP.

All the client certificates must be SHA 256-signed, 2048 bits, and have UserPrincipalName as the subject.

Single Sign-on must be performed between StoreFront and Citrix Gateway. After deployment the architect observes that LDAP authentication is failing.

Click the Exhibit button to review the output of aaad.debug and the configuration of the authentication policy.

What is causing this issue?