The key is the last sentence of what you posted...
This means that we now can base what data you get access to using the group attribute that can be inserted using SAML or tickets
You can only use whatever you map from the SAML response to the "group" in Qlik. Additional information and great write up here:User.Environment.What?! - Session Attributes in Qlik Sense