The setup
Is deployed with a goal of having no user interaction required for the VPN. SAML
automatically authenticates the user after they are logged into Windows.
Pre-logon enables authentication before Windows login, but no user credentials
are stored yet, so the option for automatic connection is using machine
certificate.