Simple OIDC question

[zacek100]

So let's say I configured rdpGW to use AzureAD as its Identity Provider and I then login as
[email protected] and connect to host server1.mydomain.local

What user does it use to log into server1 as "[email protected]" does not exist on the target server?

Furthermore, how could I assign this outside user "exclusive" access to a Windows folder in the target server so that I can remove "Security/Users" from it thus preventing other users from seeing its contents?