- To address this specific problem, navigate to the EEM LDAP integration page and under group configuration look for ‘Group Resolution level’ which by default is set to 'Resolve nested groups'.
- Change ‘Group Resolution level’ from ‘Resolve Nested Groups’ to ‘Do Not Resolve groups’. This will prevent EEM from expanding each AD group resulting in faster login.
Note: Do NOT set "Application Group level" to "Do Not Resolve Groups". This should be set to "Resolve Nested group". If Application group level is set to "Do not Resolve Groups" this could cause "No Authentication Policy for User" errors when trying to login.
Example of proper configuration discussed here: