ps
 the caller belongs to
 (e.g., "<code>memberOf</code>").
 <p>
 This attribute is used only if: a) group search is not configured
 (i.e., no groupSearchBase and groupSearchFilter configured); and,
 b) the caller's DN is available, either because groups are being returned
 during the credential validation phase by an identity store that performs
 both validation and group lookup, or because the DN is available in the
 <a href="CredentialValidationResult.html" title="class in jakarta.security.enterprise.ide