clientGroupIdentifier 1.3.6.1.4.1.838.3.41.1.1.1.1

The identifier is a string which can be associate with users via the authentication sub-system.