Does anyone know if ACS 5.x supports the evaluation of nested AD groups during group mapping? I found mention of the feature in the ACS4.2.1 configuration guide at here, but the guides for 5.x make no mention of it.
The 4.2.1 guide says:
Enable nested group evaluation during group mapping — When this option is enabled, you can create group mappings that use Active Directory groups that a user is an indirect member of. However, this option will not evaluate Domain Local groups in Active Directory so any group mapping that references Domain Local groups will not operate correctly. When this option is disabled, group mapping will not work if it references an Active Directory group of which a user is an indirect member. Only groups that users are direct members of should be used. However, this option will evaluate Domain Local groups in Activate Directory and they can be used in group mappings.
Thanks.
