Multi AD groups for Global Protect access

[ParishSoftIT]

Hi All,

I have a Global Protect access question for group. I have given access rights to a VPN user group and assigned the AD membership that almost all of our staff is a member of to it and its been working well. Now I need to add a second AD security group for our development contractors. I added the group they are all members of to the User/User Group for the client config of the Global Protect portal but it doesn;t seem to be reading it. my main group still works but the new one does not.

I assummed that the groups in here are either / or, so it would authenticate AD users that are members of either group listed so all I needed to do was include that group and they would then also have access. Did I miss something else?

Long term I plan to put them on their own portal with limited network routing, but for now I just need to get them in the door without adding them to the main staff security group.

Thanks in advance for any help.

Doug

[ParishSoftIT · Accepted solution]

Hello again,

I found it. Under authentication profiles for the "VPN_Users" I needed to add the AD group there as well.

Thanks,

Doug