Hello Lutz,
I am following YouTube videos,
Implementing Single Sign-On -- 1/5: Installation and configuration of Secure Login Server for this implementation.
And Implementing Single Sign-On -- 2/5: Installation and configuration of Secure Login Server - YouTube clearly mentions that we need to create user in AD which is further maintained in SPNEGO.