I had this same problem with the latest EMS.If you open your ZTNA
Destinations Profile - Select Advanced and you'll see the following
"EYE" icon - this sets whether the tab is visible in the client.
Did you ever get this implemented? I don't understand which IP to use on
the EMS Cloud config to see the internal AD Server? I've found my public
address for EMS Cloud to allowlist to the internal AD server - but how
would EMS Cloud know how to route...