This message was deleted.

see https://jkindon.com/citrix-workspace-azure-ad-dsauthazureadnestedgroups/

I've had a ticket open with Citrix on this, and (at least according to them) this was turned on a couple of weeks ago. Didn't help though, I had to switch all the on-prem groups from local scope to universal scope. That finally got most things to show up, and stay that way.

is big important app a traditional published app, or a 'citrix managed' library app?

Traditional published app

is this still a requirement? to ask support to enable https://support.citrix.com/article/CTX495517/intermittent-enumeration-of-resources-azure-ad ? We use AD Universal Groups for delivery group and application permissions, and seem to have issues once our nested groups get beyond 3 levels.

I ran into the same problem with nested groups. Having Citrix throw that switch didn't help, since we have some extremely deeply nested groups. I switched to SAML authentication, which is enumerating everything properly. More of a pain to set up, but it gets the job done...

Forgive me, but did Microsoft change their stance on nested group support in Azure AD?