diff --git a/ssoauth/extras/hsh_compat.py b/ssoauth/extras/hsh_compat.py
index 9daf1fc9a2fa18265adf3e8d01caa3e71060914d..2aaf086e6ba62e85df27e1a04c528380cbb84153 100644
--- a/ssoauth/extras/hsh_compat.py
+++ b/ssoauth/extras/hsh_compat.py
@@ -3,6 +3,7 @@ Compatibility features with the `hsh` app
 """
 
 from .. import logger
+from django.db.models import Q
 
 
 try:
@@ -13,7 +14,8 @@ except ImportError:
 
 
 ALLOWED_AUTH_PROVIDERS = ["fh-h.de"]
-GROUP_NAME_LOOKUP = dict(name__istartswith="WEB_")
+GROUP_NAME_LOOKUP = Q(name__istartswith="IDM_") | Q(name__istartswith="WEB_")
+
 
 
 def get_group_names_for_user(user):
@@ -26,6 +28,6 @@ def get_group_names_for_user(user):
     except (Account.DoesNotExist, Account.MultipleObjectsReturned,) as e:
         logger.error("hsh.Account not found for {user}. {e.__class__.__name__}: {e}".format(user=user, e=e))
         return set()
-    hsh_groups = hsh_account.auth_groups.filter(**GROUP_NAME_LOOKUP)
+    hsh_groups = hsh_account.auth_groups.filter(GROUP_NAME_LOOKUP)
     return {g.name for g in hsh_groups}