What to do when the Google Groups lookup fails during login:

• DEGRADE: sign the user in with only the authenticated authority and log a warning. Their group permissions return at the next successful login.
• FAIL: refuse the login.

A failed lookup is never treated as "member of no groups".