Reference Guide
...
RDP Proxy Connections
Remote Application User Types
Log in to a Remote Application with Session User
Illustrated below is the remote app configuration screen. Checking the Allow Session User box will enable the use of the Kron PAM user to log in to a remote app. For instance, if an LDAP account is used to log in to the Kron PAM GUI, the same account will be used to log in to the remote app.
Session User Configuration Parameters for Remote Application Login