AD query is not working in APM in version 13

Hi All,

i am trying to configure APM policy with AD athentication and AD query based upon groups but when i am adding AD query in policy it falling in deny only . while i configured this multiple time but in version 11 and 12 not in version 13. is this a bug?