Scenario given:
Firewall (e.g. WatchGuard, FW-1) —> RADIUS to eDir —> UserAuth to integrated Vasco Tokens assigned to each Remote User (no explicit VASCO RADIUS Server)

This is up and running (doc is available to all who are interested)

Question: In this constellation I will have to configure every user at the firewall. Is it possible to gain the access to internal resources at the FW to a group and work with group membership in eDir? The DAP supports RADIUS Attribute Filter-ID.

Does anybody have any experiences?