Nesting SAML and Local Groups

["Caroli, Gino" <Gi...@dsbn.org.INVALID>]

Hello,

I'm piloting Apache Guacamole in our organization and I have been trying to see if there is a way to nest SAML groups with Local Groups.  I am able to get users authenticated and resources assigned via SAML groups using the group ID, but for the sake of ease of management what I was hoping to do would be to have a local group defined with the connections assigned to it, and then make the SAML group a member of that locally defined group.

ex. Local Group - "ACME Contracting" has access to a Building Automation Server.   Entra ID (Azure AD) group ID "7beb9ac3-6042-4fce-a5ff-430e212363ab" contains users defined in our tenant.  This Group ID is also configured as a Member of "ACME Contracting" so that users within the Entra/Azure group inherit the connections assigned to "ACME Contracting".

In my testing, this doesn't seem to work.  Is this in any way possible with Guacamole?

Thanks,
Gino