SSP's can only target Active Directory lists or Security Groups. Ben Curry shows in his blog,
how to use even use Site Groups as audiences in Shared Services ...
See more here..
http://mindsharpblogs.com/Ben/archive/2007/01/05/1459.aspx