The authentication group matches a group either inside the LDAP directory if LDAP authentication is defined or a role in the claims if the authentication mode is sso. This group is usually mapped with a profile. It defines the list of persons that will be able to connect with it.

The authentication group is taken into account in the web authentication but not in the windows application.