We use FreeIPA/SSSD to authenticate our RStudio Server, which we control via HBAC membership of an AD group.
Our users are having their sessions ended frequently - once a day or more - with the logged message
17 Aug 2017 05:16:21 [rserver] WARNING User <user>@<domain> could not be authenticated because they do not belong to one of the required groups (rstudio); LOGGED FROM: bool rstudio::server::auth::validateUser(const std::string&, const std::string&, unsigned int, bool) /root/rstudio-pro/src/cpp/server/auth/ServerValidateUser.cpp:103
Most likely this is partially because RStudio server is overly aggressive, but I am also noticing that their log is telling the truth: