At the moment I'm evaluating ACS 220.127.116.11 (Eval-Version).
I defined a Service Selection that leads to an Access Service named "DeviceAdmin".
Within this I defined Authorization Rules (Standard Policy) with Conditions an Identity Group and/or UserName.
The problem ist that they never match.
Even if I define an (existing) Identity Group (also All Users) or an (existing) Username, the Authorization Policy always hits to default rule.
Any hint, what's wrong? A known bug?