<association>
            <c:ref>ri:group</c:ref>
            <displayName>AD Group Membership</displayName>
            <tolerant>false</tolerant>
            <exclusiveStrong>false</exclusiveStrong>
            <kind>entitlement</kind>
            <intent>group</intent>
            <direction>objectToSubject</direction>
            <associationAttribute>ri:member</associationAttribute>
            <valueAttribute>icfs:name</valueAttribute>
            <explicitReferentialIntegrity>false</explicitReferentialIntegrity>
</association>