This counts users identified via manual username-and-password login, typically through the captive portal, rather than transparent Kerberos or AD Query. A meaningful count here usually means those specific users are on non-domain-joined devices or network segments where automatic identification methods don't reach, which is a useful signal about coverage gaps in the identity deployment. For example, 25 users might be authenticated this way.