NAC Guest Server 2.02 SSO

[rchester]

I have configured IE security,NTP and DNS settings. But SSO isnt working. Is there any gotchas for NAC Guest Servr SSO?

[Vinay Sharma]

Hello Rchester,

this question has been posted in wireless domain. So moving to Security.

thanks,

Vinay

[rchester]

Ok. It looks like the NAC Guest Server can't enumerate users in nested groups.

So if you want to find a user add the group that the user is in not a group that contains the group the user belongs in. Maybe even make one just for Sponsor roles?

[Rob Simkins]

Thanks for this, I was hoping nested groups would be supported.  Because let's face it that's a pragmatic way of allowing support teams to get an elevated sponsor privileges....

I did suspect that nested groups would be the issue yet there is ZERO documentation to confirm it.  Cheers Cisco!

Thanks for saving me a TAC case!