Trying to configure Firepower 6.3 URL filtering so that users from multiple AD domains can be recognized. We have user agents configured for both domains, and can retrieve users and groups. What we can't seem to do is get an identity policy that will allow both domains to work.