The error occurs because jsreport evaluates the array of groups as a single, combined string instead of looking at the items individually.
Look closely at your error message:
No jsreport user group "G-AAAAA-BBB-ABO,...,G-AAAA-BBB-jsreport-TEST,...,kt\Domänen-Benutzer" found...Notice how the entire list of Active Directory groups is wrapped in a single set of quotation marks ("G-AAAAA...,G-AAAA-BBB-jsreport-TEST,... ").
Your Identity Provider (IdP) is passing the AD groups claim formatted as a comma-separated string, whereas jsreport expects a native JavaScript array of strings. Because of fnaf 4, jsreport is literally searching for a single group named exactly like that massive string rather than evaluating your specific G-AAAA-BBB-jsreport-TEST group