Nested AD Groups

[S(AML)layer]

Can Duo read users associated to nested AD groups in a parent AD group when the parent AD group is being synced into the Duo system to grant access to an application on the Duo Central dashboard?

[DuoKristina · Accepted solution]

https://duo.com/docs/adsync#groups

"Nested groups are supported; Duo sync imports users from groups nested within your sync group, but creates only the top level group in Duo (the group explicitly selected for directory sync), with all nested group members as direct members of that Duo group."