Extract group/domain/password in AuthzDecisionQuery