1. Ensure you have a Directory asset defined. If a directory asset does not exist, create one from Assets | +, and selecting "Active Directory" under Product.
2. Ensure the AD user account has been setup. From Assets, go into the Active Directory system (the filter IsDirectory:true can be used to find the Directory assets), select the Accounts tab and click +.
3. Ensure the account has a password Set in Safeguard
4. Ensure the account has "Session Request" ticked
5. On the Member Server asset ensure that Session Requests are enabled
6. To use the Directory account, you define an Access Request policy in the same way as a local session, but in the Scope add the Asset itself.
7. In the "Access Config" under "Asset-Based Session Access" select "Linked Account"
8. Assign the Entitlement to the required users
9. From Users, go to the "Linked Accounts" option and select the + button. Select one or more users to link to.
10. The user will now to be able to request the linked AD account for the asset