Allow LDAP Group Sync without LDAP sign-in

Problem to solve

In this user's scenario, they want to use SAML for login without the option for LDAP login, but would like to be able to manage their group membership through LDAP.

Links / references

ZD https://gitlab.zendesk.com/agent/tickets/112227 (internal)