I still don’t understand how I could access the groups coming from Azure AD.
The blogpost says:
This means you can make more use of standard properties such as
user.roles,user.groups, anduser.permissionsto understand customer profiles and protect user interests better.
But the documentation page does not mention these new root properties at all.