Hi,
Shibboleth does has a field named isMemberOf which lists the groups to which a user belong to. You can see on the documentation about this multi-valued field.
Do you know, if we can use shibboleth module to have the concept of External Groups as done with the SAML or the LDAP module ?