Yes, ad_gpo_map_interactive is the right one.
I understand that the Gnome and KDE display managers are already included in the
hardcoded default list. My question was more along the lines of why sssd needs to have
such a hardcoded list at all. It seems like a poor design as it will invariably create
headaches for people who choose to use software that isn't in the default list,
whether that is lightdm or something else. Would it be possible for services to identify
themselves as "interactive" or not, rather than placing the responsibility on
sssd? And does the whole "interactive" vs "noninteractive" mechanism
actually provide any real security?