Authorize with Controllers with AD Groups using OIDC

Question

we have a web application which uses OIDC for single sign on to authenticate with Azure AD. The single sign on works great, Users are able to sign in with their AD accounts.