Can you authenticate with Active Directory? Ans: Yes, it is using SAML.
Whether or not you are authenticating to active directory first and then given a temporary security credential? Or, if you get the temporary security credential first, which is then authenticated against active directory? Ans: You always authenticate against active directory first, and then you will be assigned the temporary security credential.