Does BCAAA use more resources when the ProxySG policy refers to nested Active Directory group names on IWA realms?
Updated On:13-05-2017 09:02
ProxySG Software - SGOS
<p><span style="font-size: 10pt;">When the ProxySG appliance connects to BCAAA, it sends BCAAA a list of all the groups referenced in policy. These are called "Groups of Interest.” </span></p>
<div style=""> <span style="font-size: 10pt;">BCAAA creates a mutex for each Group of Interest. An ACL is placed on the mutex such that it allows only the specified group access.</span></div>
<div style=""> </div>
<div style=""><span style="font-size: 10pt;">Following a successful authentication, BCAAA impersonates the user and attempts to access each mutex; this lets Windows handle the complexities of nested groups. Nested groups are therefore not an issue for IWA realms.</span></div>