LDAP sync should ensure login IDs not found in the original query design are still synced.