Cisco ACS 1121 integration with AD

[jimanda6419]

Has anyone successfully integrated the Cisco ACS 1121 with 5.1 and AD and been able to use multiple policies to permit or deny access to different NDG?  I am able to authenticate agains AD but I am having an issue with getting the policies to use the user memberOf attribute to set access levels.  Any ideas would be helpful.  

[jrabinow]

memberOf attribute is a multi value attribute; ie can contain multiple values. Polciy operations on multi valued attribute are not supported in ACS 5 except for group membership. Should check is similar conditions can be acheived using operations on the groups the user is a member of