Claims in access token for OpenID Connect

@ewan: Yes, you can add groups and other custom scopes to your access token.

This question/answer should get you on the right path.