USG version is V5R1C60 version, ADSSO.exe is for V5R1C80 version. FW cannot see online user information after user login
we login the FW and request test, then we debug on FW to check, find FW can receive the packet from AD server. and check the configuration is fine.
then we check the ADSSOAgent application, found it is set with Enhanced mode.
because of the compatibility problem, USG version is V5R1C60 version, ADSSO.exe is for V5R1C80 version. so just can use the Common mode and need disable the Enhanced Encryption on FW
after change the Gateway Shared Key mode to common on ADSSOAgent, and disable the Enhanced Encryption on firewall, then the issue was solved.