This screen shot shows the Create Policy Domain - Default Rules - Authentication Expression - Actions page, with return actions set for the uid and obmygroups attributes.