To implement claim-based authentication I would like to have the ability to access to group membership in IdP response, and based on that information vuild permission model in my application.

More details
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/create-a-rule-to-send-group-membership-as-a-claim