Clearpass is being used for the page. Users are AD authenticated, and Palo Alto for URL filtering. However, if a user just types a username, it only passes the username to Palo Alto, and then they don't hit the proper filtering rules... We would like to make sure everyone on BYOD authenticates with domain\username.