Azure Devops Server and Self Hosted Agent configuration when Anonymous Authentication is disabled

Same question is asked in SO and no one seems to know the answer. Any ideas?

https://stackoverflow.com/questions/69739921/what-is-the-appropriate-agent-setup-on-an-azure-devops-on-premise-server-with-di