Groups claim using authorization extension