Federation Security Services Guide › Configure SiteMinder as an Account Partner › Select Users for Which Assertions Will Be Generated › Allow Nested LDAP Groups Resource Partner Access

Allow Nested LDAP Groups Resource Partner Access

LDAP user directories can contain groups nested in other groups. In complex directories, large amounts of user information can be organized in a nested hierarchy.

When you enable a Resource Partner to search for users in nested groups, the Policy Server searches any subset group you add to a policy. If you do not enable nested groups, the Policy Server only searches the single group you specify for the Resource Partner.

To allow the Resource Partner to search nested groups

1. From the Users tab, select the Allow Nested Groups check box to enable nested groups searching for the Resource Partner.
2. If the associated affiliate domain contains more than one user directory, the directories appear as tabs on the User tab.