In Generic OpenID Connect / OAuth2 map groups from group claim maps multiple times the group to the user