Grouper Shib plugin's GroupExactAttributeFilter does just what it says for Attributes only. It doesn't handle types although the GroupDataConnector masquerades Types as Attributes (shib attributes (BasicAttributes) in this case). Need to create a GroupExactTypeFilter which performs the same operations as the GroupExactAttributeFilter.