Authorization Group Mapping Issue

We are using the “Group Mappings” feature in the authorization extension and it appears to be “half working”. We have setup some “Group Mappings” for our Active Directory connection but when a user logs in, the mapped groups are not actually applied to the user or group. The group names are added to the user’s app_metadata groups section of their profile but the mapped group(s) are not assigned to the user.

Any thoughts?