use Token Groups
Parameters
value
Use the Active Directory tokenGroups constructed attribute of the user to find the group memberships
Use the Active Directory tokenGroups constructed attribute of the user to find the group memberships