As this endpoint is used in sessionless checks we cannot expect it to
require a SSO session.

Fixes GraphQL access to a group when SSO Session Enforcement is enabled.