Exclude service accounts from LDAP group sync
Based on a recent thread we identified that service accounts cannot be directly added to LDAP group sync enabled groups. This matches the original implementation where the LDAP sync is the SSoT but for service accounts, it will require disabling the sync, adding to each group manually and re-enabling the sync.
This issue proposes that we exempt SA from being validated against the synced list.