ACS 5.2 - AD Group Mapping from Trusted Domain

[lmslattery]

Hi All,

Here is a rundown of a scenario that I have that i'm hoping that sombody can assist with.

• I have an ACS 5.2 system integrated with Domain A that is configured to trust Domain B.

• ACS successfully authenticates users from Domain A or B.

• I have a group configured within Domain A that contains users from Domain A and B.

• I have a Group Mapping rule that maps members of the group from Domain A to an Identity Store that provides priv 15 access to devices.

It seems that my ACS successfully authenticates users from domain A  and successfully matches the group mapping rule I have configured.

When a user from Domain B that is a member of the group from Domain A authenticaticates  , ACS fails to recognise their membership to the group in Domain A and therfore my group mapping rule never applies.

Will ACS recognise group membership for users within trusted domains ?

Thanks,

Leon

[leoluca.condo]

Hi,

We have same problem here, no groups mapping whit trusted domain... worked properly with acs 5.1

any helps?

thanks Luca

[lmslattery]

Hey Luca,

I have a TAC case in progress on this issue at the moment. The engineer has recreated the issue in their Lab and is currently working with dev on it.

I'll let you know how i end up going.

Leon