There are several authentication methods possible, either with a smart card, a username/password combination or a YubiKey.In the Sophos SGE solution a sync with all domain accounts on the machine is done and you can authenticate with your domain password.