How to get group name CN from session.ad.last.attr.memberOf when there are multiple attribute value

I found an error though causing duplicate entries

you can use this one as custom expression

set result ""
set groups [mcget {session.ad.last.attr.memberOf}]
foreach {full match} [regexp -all -inline {CN=([^,]+)} $groups] {
    append result "| $match "
}
append result "|"
return $result