ZPA-only clients are not getting AD Groups to populate, so only SCIM works.
This is a deliberate design choice. ZPA requires customers to have ZIA as well in order for the groups to populate. The Client Connector Portal acts as the common link between the two, and Zscaler has only provided this functionality with ZIA. Therefore, ZPA-only customers must utilize SCIM for granular controls.
