Add Active Directory group filter

This adds an additional filter to support AD when querying for groups. We can add an integration test for this later on, but I'll include results from manual testing in a bit.

cc @mtodd