ACS 5.x: Authenticating nested LDAP groups

[Nadav]

Hi everyone,

Is it possible with ACS 5.x (specifically 5.8) to authenticate ldap groups nested in other ldap groups? For example Operational_Users is an LDAP group which contains a group called Florida_Operations. Can I via LDAP integration add Operational_Users and assign it to an Access Policy, so that all the groups within it are also authenticated by this Access Policy?

[Aditya Ganjoo · Accepted solution]

Hi,

Nested groups with LDAP is not supported on ACS 5.8.

However, nested and transitive groups are supported with AD.

Regards,

Aditya

Please rate helpful posts.

[Nadav]

Thanks Aditya!

Is this documented in the white papers? I found information regarding nested groups with AD but nothing regarding nested groups with LDAP.