title: aspnet 5 (MVC6) Windows Auth + roles + Authorize attribute
body: <p>I have an app that uses Windows Auth on aspnet 5 MVC 6 (obv using IIS + IISPlatformHandler)</p>
  
  <p>How can I restrict access to a controller by AD group?</p>
  
  <p>I have tried doing something like the following, but it won't work :( When I look at my user claims I see many groups and claims that look like SID's ex. {S-1-5-4}</p>
  
  <pre><code>[Authorize(Roles = "DOMAIN\\GROUP")
  public class myController : Controller{...}
  </code></pre>