I am currently experiencing problems when trying to retrieve the session.ad.last.attr.memberOf attribute in an AD Query.
It seems that some of the groups are coming up but not all of them.
Do you know if there is a limitation at this level? And if yes how to bypass this limitation?
In order to clarify the check mark "Nested Groups" is activated.
But these do not go up completely.
It's all good, I found it
For those in my situation.
A simple clear of the group life time allowed to solve this problem of nested groups.
Here is the article with the solution: https://support.f5.com/csp/article/K14871812