Check on AD group to give access

It is not a pre-logon check, it is a custom protected resource.

 

 

What i am trying to do is the folowing:

 

 

I got a certain resource i want to limit to users who are only member of a certain domain group.

 

 

So i have made a Protected configuration, with a custom check.

 

session.ad.auth.memberof = "Terminal Server Users" (this should check if a user is member of that group)

 

 

But it turns out the firepass only gives the first group it finds (alphabet order) and not all groups the user is member off.

 

And therefor im afraid its not possible