Delegates the groups resolution to a custom script.

Each time the authentication is attemped (which is once per session), the specified script will be invoked with the username in the 'U' environment variable. If the script returns exit code 0, the output will be tokenized by the delimiter (default: ',') to create a groups with each token.

In case of the failure, the output from the process will be reported in the exception message.