Seth, This was a great help. I was able to get it working using LDAP
First, We have more than the needed groups showing in the drop down select because they match the OU="",DC="",DC="". Is there a way to limit which groups show up that match that string? In testing I have about 7 groups show up but only 3 would actually work and would be set up in Advanced resource assign.
Second I was able to get it working. But it would only only work when i add a Network Access object AND a webtop object. If i dont include the webtop it tells me "Configuration error. Webtop configuration is required. Webtop configuration is not necessary for App Tunnel Control, or a Portal Access connection with minimal patching configured". Any idea why this is?