Add "is in group" web extension for AD groups too