Or, more simply, use group extraction and create a group in Domain A containing the members of Domain B. https://docs.netscaler.com/en-us/netscaler-gateway/current-release/authentication-authorization/configure-ldap/ng-authorize-ldap-group-extraction-multi-domains-con.html#:~:text=To%20configure%20NetScaler%20Gateway%20for,policy%20and%20one%20authentication%20policy.

Cool - thank you!

Youre welcome