Adding Group To idToken

@Lijia I believe I found the issue and solution here Okta Help Center (Lightning)

And here No 'groups' scope in the console for the default Authorisation Server