If user group are recalculated before changing the workflow state, it will only return the same security group See c00c3636