<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body>
<div style="direction: ltr; font-family: Aptos, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Dear List,</div>
<div id="mail-editor-reference-message-container" style="color: inherit; background-color: inherit;">
<p class="ms-outlook-mobile-reference-message skipProofing">until recently, we used to add a </p>
<p class="ms-outlook-mobile-reference-message skipProofing">followReferrals="true"</p>
<p class="ms-outlook-mobile-reference-message skipProofing">to the LDAP DataConnector and we could see the AD nested groups. Or we added a separate "myGroups" DataConnector using the extended Filter as in
<a href="https://shibboleth.net/pipermail/users/2020-March/046262.html" class="moz-txt-link-freetext" originalsrc="https://shibboleth.net/pipermail/users/2020-March/046262.html" data-outlook-id="e934df7e-eca0-4f72-9106-deb86a8c12d9" style="margin-top: 0px; margin-bottom: 0px;">
https://shibboleth.net/pipermail/users/2020-March/046262.html</a></p>
<p class="ms-outlook-mobile-reference-message skipProofing">This does not seem to work anymore, for some months we've seen more and more deployments where this fails. Is anybody aware of that? Were there changes in the AD deployments allover the globe? Does
anyone have a solution to get these nested groups with the Shibboleth IdP?</p>
<p class="ms-outlook-mobile-reference-message skipProofing"><br>
</p>
<p class="ms-outlook-mobile-reference-message skipProofing"><span style="font-size: 16px; color: rgb(0, 0, 0);">What version of the IDP are you running?</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing"><span style="font-size: 16px; color: rgb(0, 0, 0);">Are you setting followReferrals=</span>“<span style="font-size: 16px; color: rgb(0, 0, 0);">true</span><span style="font-size: 16px;">”</span><span style="font-size: 16px; color: rgb(0, 0, 0);"> directly
on the <DataConnector/> configuration? </span></p>
<p class="ms-outlook-mobile-reference-message skipProofing"><span style="font-size: 16px; color: rgb(0, 0, 0);">If you post your (redacted) configuration here I can review it.</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing"><span style="color: rgb(0, 0, 0);">--Daniel Fisher</span></p>
<p class="ms-outlook-mobile-reference-message skipProofing"><span style="color: rgb(0, 0, 0);"><br>
</span></p>
</div>
</body>
</html>