Retrieve Okta Groups in Callback during Authentication Flow

We are currently trying to implement Okta in our Rails application, and it seems to work. However what we would like to do is assign a group to our Okta users, and when authenticating to our application, have the Groups that the user belongs to be part of the callback payload. Is this possible? Or do we need to make an API request after authentication based on the user to get the Groups the user belongs to?

@markrainer You can configure a groups claim so that this information is available in the token.