Palo alto can utilize User AD Mapping in conjunction with AD groups and IP Addresses.
These are two articles that well explain on how to proceed with server and Palo alto user AD authentication
Next-Generation Firewall Configure Server Monitoring Using WinRM
Next-Generation Firewall Create a Dedicated Service Account for the User-ID Agent