Custom session variable for filtered memberOf AD attribute

Newbie here, so please excuse me for not understanding.

thanks all for this post and answers! Took me a while to find this and it works great for me if I have multiple groups containing "XYZ". However, If I have only one group it appends the pipe in front and back of the single value. Was hoping to just return the single value.

Any help would be great!

Thank you