Hi @orchari Seems it is not that simple. I was finally given time for LAB of this request and creation of LDAP external identity source where you discover an AD group is not enough, as using this identity store within Identity Source Sequence will ba...