A network manager wants to implement an Aruba wireless solution that accommodates 802.1X with EAP-TLS. All wireless users will utilize Active Directory (AD) accounts to authenticate.

Which device will the authenticator forward the authentication requests to in this type of solution?