CA SiteMinder R12.8 - R12.8SP3 do not allow the configuration of Nested Groups for User Authorization in Federation Partnership
CA SiteMinder R12.8 - R12.8SP3 do not have the function as design.
CA SiteMinder R12.8 - R12.8SP3
It was enhanced in R12.8SP4.
https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-enterprise-software/layer7-identity-and-access-management/single-sign-on/12-8/release-notes/New-Features/New-Features-in-12_8_04.html#concept.dita_25df7fc3-60f0-4e01-b135-1118d9f57a65_SupportforAdditionalParametersforUserAuthorizationinFederationPartnership
New Features in 12.8.04
Support for Additional Parameters for User Authorization in Federation Partnership
The Allow Nested Groups or AND Users/Groups parameters are used by the user authorization policy. By default, these parameters are provided in the domain policy configuration and legacy federation configuration.