Submitting forms on the support site are temporary unavailable for schedule maintenance. If you need immediate assistance please contact technical support. We apologize for the inconvenience.
Has expand ac groups functionality changed between vas3 and qas4?
Description
Has expand ac groups functionality changed between vas3 and qas4?
Resolution
Yes the code has changed from 3.x to 4.x. In 3.x, we did one-level unroll of the groups to cross the forest boundary. We then added the cross forest groups with the domain lower to separate them. That way when a user's tokenGroups was processed, that only had in-domain groups, it would still find an AC match and work.
But now in 4.x, expand-ac-groups does a FULL unrolling, so that is no longer needed.
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Welcome to One Identity Support
You can find online support help for*product* on an affiliate support site. Click continue to be directed to the correct support content and assistance for *product*.
The One Identity Portal no longer supports IE8, 9, & 10 and it is recommended to upgrade your browser to the latest version of Internet Explorer or Chrome.