Hello, I'm piloting Apache Guacamole in our organization and I have been trying to see if there is a way to nest SAML groups with Local Groups. I am able to get users authenticated and resources assigned via SAML groups using the group ID, but for the sake of ease of management what I was hoping to do would be to have a local group defined with the connections assigned to it, and then make the SAML group a member of that locally defined group.
ex. Local Group - "ACME Contracting" has access to a Building Automation Server. Entra ID (Azure AD) group ID "7beb9ac3-6042-4fce-a5ff-430e212363ab" contains users defined in our tenant. This Group ID is also configured as a Member of "ACME Contracting" so that users within the Entra/Azure group inherit the connections assigned to "ACME Contracting". In my testing, this doesn't seem to work. Is this in any way possible with Guacamole? Thanks, Gino
