x-pack/filebeat/input/entityanalytics/provider/okta: add user group membership support · elastic/beats@603c8c1