@ShawnGaston Are you using this configuration? Duo Single Sign-On for Dropbox | Duo Security
You have a Dropbox SSO application in Duo, and you have synced a group into Duo, and you want to ensure that only members of that synced group can access Dropbox via Duo SSO?
To do that you would visit the details page for your Dropbox SSO application in the Duo Admin Panel, scroll down to the “Permitted groups” box, and select that synced AD group.
Learn more about Permitted groups here.
The security_group_dn
setting for the Authentication Proxy’s ad_client
config is only used when the Authentication Proxy is performing primary LDAP authentication for RADIUS and LDAP applications, and is not applicable at all to Duo SSO authentications.