The logic is working the problem seems to be the groups are not found. For example if the group "OPS" is used the maping works. If the group "LBO_ATL_GA" is used the login fails. It seems like the the groups are limited to 8 characters.