
DJU.00400 (Customer) asked a question.
I read that users cannot be a member of more than 600 security groups if Agentless DSSO is implemented. Is that direct membership in security groups only or does that include nested memberships and/or distribution groups?

Hello @DJU.00400 (Customer),
Thank you for posting.
Please check the following link with information:
https://support.okta.com/help/s/article/What-are-the-known-limitation-of-Active-Directory-Desktop-Single-Sign-on?language=en_US
Regards,
Natalia
Okta Inc.
I'm not sure how to modify my question. This is not and answer, but an addendum.
That link does specify security groups, so I assume distribution groups are not a factor, but it does not answer my question about nested groups. If a user is a member of one group that is a member of four other groups, does the user have one security group membership or five?
thanks