Steps to reproduce:
see failing test case: https://github.com/camunda/camunda-bpm-platform/commit/e32313b88af6af80211d6df07e863b47556594cc
Hint:
The query parameter groupIdIn is used by the HalGroupResolver, so that the groups cannot be resolved when using the LDAP Identity Provider.