Active Directory dynamic nested groups

To support nested groups, Active Directory provides a filter which is added to the group member of attribute to provide a method to look up the ancestry of an object.

Nexus works with this successfully for static groups but not for dynamic groups.

Group member of attribute:
memberOf:1.2.840.113556.1.4.1941:

With the filter added to the dynamic group member of attribute, Nexus could not create an external role mapping.