Application not able to fetch AD group

Our application which is hosted on AWS uses Cognito and Azure AD for authentication. We have configured everything and identity will prompted while logging to the application. The application will be redirected to Azure login and the user can able to login to the application. However, after login to the application, the user does not get any permission, which means the application is not able to find which AD group the user is present. But we have configured users to the correct AD group added these AD groups in the application and added corresponding permissions. How to debug such issues?