Does Jackson's Directory Sync have any support for nested groups?

[DanHetheringtonIL]

I understand that the SCIM protocol provides for nested groups, but that some IdPs, including JumpCloud, do not offer them (please correct me if I'm wrong).

Does Jackson's Directory Sync support nested groups in any way?

Do any of the IdPs that Jackson supports currently have support for nested groups?

[deepakprabhakara]

@DanHetheringtonIL That's correct, SCIM relays an array of groups the user belongs to but it is a flat array in the sense that we have no way to figure out the actual nesting underneath. For example is group A has group A1 and A2 under it then a user added to group A1 will come through SCIM as havings groups A, A1. As you already mentioned certain IdPs don't send the nested information.

[deepakprabhakara]

@DanHetheringtonIL As far as we know only Microsoft ADFS (on-prem) supports nested groups but the SCIM support there is lacking. Entra ID recently announced support for nested groups but I am not sure it is generally available yet. Okta doesn't support nested groups.