Is the ACS software not capable of using nested groups? i.e. Define a user in GroupB in one domain, nest that group in GroupA in another domain. Created the mapping in the ACS to GroupA. Can it only locate a user/group combination within the same ...