Cross-forest group membership support in Active Directory environments

The User Visibility module supports a user who is a member of one group, and is also a member of another group. The Cloud Extender® can detect this type of membership and map the user to the right group, and then import those groups into MaaS360®.

The following example uses a group that is named MaaS360EmeaAp2 that has most members in the local domain and forest (dummy.local), but has two users on foreign trusted domains (AUS and TESTFOREST2).

In the 2.89 release of the User Visibility module, foreign users are resolved correctly to distinguished names on the corresponding local forest and domain, and then imported into MaaS360. These foreign users receive the same entitlements that local forest or domain users receive who are assigned to the group.