Hello Bill,I believe this is supported in Introscope 8.x versions. You need to configure these properties in realms.xml:
cn
(&(objectClass=organizationalUnit)(cn={0}))
(&(objectClass=groupOfUniqueNames)(uniqueMember={0})) Then you assign permissions for your LDAP groups.
For example, if the user belongs to an LDAP group called "Group 1", then the domains.xml should have an entry like: For more details, please refer to the Introscope8.1.0.0ConfigAdminGuide.pdf, page 213. I hope this helps, Regards, Sergio