light authentication over groups