Authorization condition - OK to use AD groups with nested groups within?

[david.daverso]

            Does ISE 1.2 Authorization policies permit a condition referencing an AD group containing other groups nested within?  If not, is the alternative to create an authorization policy for each AD group in the case where a policy is to be applied if a user is a member of group A or group B?

Thanks much,

David D.

[Karel Navratil]

Hi David,

Yes, it works.

We are using special group for wlan access and we put Domain Users to this group from all domains we have.

Karel