Ok so if they are domain joined and have line of sight to a DC when logging in, then Hub should not popup as Hub matches the user in AD to the logged on user. There are potential complications on the staging user and how auth is setup, such as whether you have WS1 Access in the auth flow. 

On staging user, find the user in Accounts > Users > Advanced and look at the staging config (screen capture of one of mine attached).