Properly handle groups info in SAML provider