Just like simpleSAMLphp (Bug #55085), Keycloak doesn't evaluate nested groups. https://help.univention.com/t/keycloak-and-nested-groups/21177 https://stackoverflow.com/questions/64357006/how-to-read-nested-groups-in-openldap-connected-to-keycloak
*** Bug 55787 has been marked as a duplicate of this bug. ***