Forum Discussion
Blue_whale
Cirrocumulus
CirrocumulusRe: How to add assign VPN IP based on AD group membership
Thanks for the reply ...
So I have to create AD query with multiple (3) fallback : one for US_AD_F5 & one for UK_AD_F5 and ast fallback is DENY .
2 Replies
Scot_JCEmployee
Hi,
You can also set the ADQuery agent with a single "Successful" branch (configured with the expression "AD Query has passed") and leverage the AD Group Resource Assign agent: https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-access-policy-manager-visual-policy-editor/access-policy-item-reference/about-assignment-items/about-ad-group-resource-assign.html
Regards,
- boneyard
MVP
That would work yes. Did you get this worked out? If so please flag the question as answered.
