use server-group based authentication