ADFC authentication require CCU

Look at this article

https://support.f5.com/csp/article/K13267

CCU licenses are used when secure connectivity profile is required to enable a feature...

Adfs proxy feature Requires only a LTM-APM virtual server, so it uses only access licenses.