Automatic Authentication Proxy squidGuard and releasing web access for groups AD

[Itg]

Hello friends,

I'm doing a lab for pfSense to pass the knowledge to others, I managed to integrate squidguard to AD, using the ACL Groups, each group with a few other categories blocked and released, just that I see two options.

A. Applying rules ACL Group (Webfilter) by group and not only per user, if per user per user, gives a job
B. As the pfSense recognize the AD user login automatically? Ie, the user logs onto the network and open the browser, using the same authentication. I know the paid solutions, integrating software appliance with AD are needed in pfSense, how about it?

Thank you!