Thank you, I got this to work, the key part I probably think is the
group that you create in ACS where you enter the Label and ID, you need
to use the last part of whatever you named it as in the Admin Console in
both the fields. "Campaign Standard- instance name - ID of the security
group" . "just the ID of the security group" also what I was doing is
after creating profile in Admin console I was assigning product to my
user first and then going to ACS and creating a new group. anyways its
all ...