NetVizura already has good Active Directory End Users integration - you can forward your logs from AD DC into NetVizura, and then correlate these login data with NetFlow data from your exporters. The result is a much better insight into the state of your network.
Palo Alto has a functionality called User-ID (read more on the following page: User-ID). It allows you to export Palo Alto