Some systems can't be deployed in an environment where an AD is available at the edge unit locations, being able to use the gateways as the user sources/identity provider would make life more bearable.