[SSSD-users] AD token groups