Add Active Directory group filter

This adds an additional filter to support AD when querying for groups. We can add an integration test for this later on, but I'll include results from manual testing in a bit.

cc @mtodd 
:+1: Would love to see a comment with a specific mention of Active Directory.