Authentication: Remote - Active directory + Microsoft RBAC

I have configured user authentication using Remote - Active directory, but it does not seem to be properly searching groups and applying the appropriate roles.

 I have confirmed at the CLI that we have LDAPS working to bind and find accounts

ldapsearch -xLLL -H 'ldap://<my AD server>' -b "<my search base>" -s sub -D "<my bind account>" -w '<my bind password>"(samAccountName=adm_delkins)"

the output finds the groups I am a member of as follows:

<truncated for brevity>

DC=local

objectClass: top

objectClass: person

objectClass: organizationalPerson

objectClass: user

cn: Dan Elkins

sn: Elkins

memberOf: CN=RBaC-<mydomain>-Network,OU=<my local domain OU>,DC=<my domain>,DC=<my TLD>

memberOf: CN=Domain Admins,CN=Users,DC=<My domain>,DC=<my tld>

My user account is a member of my Microsoft Active Directory RBAC group

This Microsoft Active Directory RBAC group is a member of the group created for F5 Admin

I have created these same groups on my LTM in the remote role groups with the same name as my AD group that RBAC is a meber of:

The only way I can validate that I can authenticate to LDAP at all is when I enable the "External Users" in the authentication config. This successfully authenticates me with LDAP, but since I don't match any groups, it just logs me in as Guest instead of Administrator. At least I can see LDAP working ...

While working with another vendor I had to configure that system to use a recursive LDAP search in order to get LDAP to work with the Microsoft Active Directory RBAC groups.

If this is possibly the same issue, is there a method to enable a recursive search on the F5.

If this is not likely the issue, what have I configured incorrectly that is preventing my users from authenticating with proper roles?

Any pointers would be appreciated as I need to get a working solution.