In previous versions of Crowd, authentication was done on the first directory that contained the username but group memberships were aggregated across directories. In more detail:

For user authentication, Crowd searched the directories in the order specified per application and used the credentials of the first occurrence of the user.
When granting the user access to an application based on group membership, Crowd amalgamated the group memberships in all the directories where the username occurred.