The end users are either not getting authenticated or are incorrectly authenticated when Unified Agent (UA) is installed on servers like Citrix
UA can be installed on their servers but it is not officially supported and causes issues like end-users not getting authenticated or not correctly authenticated.
In the portal: Service > Mobility select 'Logged in User' for the Username Format
(Note: The point of 'Logged in User ID' is that all traffic is sent as the logged in user (including system-level/non-interactive traffic). If there is only one user on the machine the authentication will work correctly. However, once you have multiple users, it is confusing as to "which" of the logged-in users is the 'logged in user')
UA on the servers is not supported