I’m afraid the answer is ‘possible in general, but not with the versions you are running’, see https://sourceware.org/glibc/wiki/Proposals/GroupMerging and https://sgallagh.wordpress.com/2016/01/28/remote-group-merging-for-fedora/
Jakub Our use case for group merge functionality is very much as Jeff describeds above. Have been digging around looking for definitive requirements and proper configuration. What are the required freeipa/sssd, RHEL and glibc versions for group merging functionality? Our IdM servers are RHEL 7.4, freeipa 4.5, sssd 1.16 and client's are mix of RHEL 6.9, 7.2 and 7.4. Thank you