AD query not working

Hi,

Is the user member of this group or is he member of a nested group?

for troubleshooting, can you edit VPE with following box:

• add a message box after AD query fallback branch (branch where the user doesn't match group mapping)

when the user is authenticated but doesn't match group mapping, the browser may display the added message box. don't click on continue for now... this stop policy evaluation for next step...

then in "manage session" page (access overview / active session in version 13 and 14), find your session and click on "view variables"

then search memberOf variable... find if the expected group is in this attribute.