This message was deleted.

Yes we do, it works well with 12.1 latest build, how did you bind them together?

Currently I have two AAA groups. One that will require an authorization policy that restricts based on source IP. The global authorization is Deny. Then I have a session and authorization policy assigned. Session policy authorization is set to allow. Doesn't appear like the authorization poicy is getting hit at all

What are the priorities on the global vs group policies? See example 2 here: https://support.citrix.com/article/CTX214588

yeah, make sure priorities are good. I tend to use one range for users, another for groups, etc to keep it straight.

I should say I’m doing a default authorization of deny on the global session settings. Then session policy per AAA group that is set to allow along with authorization policy.

Ah ok. Are any other settings in that user/group policy getting applied?

Just session and authorization. Session is applying successfully just not authorization. I have a case open with Citrix but this is usually faster 😀

Yep you usually get straight through to Level 3 support on here 😉 Let us know what they find, I'm curious