Alfresco SSO and External group integration for OpenConext