Implement LDAP email substitution.
This enabled the ability to generate an email for an LDAP user upon authentication.
https://www.pivotaltracker.com/story/show/76474212
[#76474212]
When LDAP group mapping is set to map groups to scopes
we force the value to reflect that we have one entry per LDAP group
https://www.pivotaltracker.com/story/show/77050808
Merge remote-tracking branch 'origin/pr/487' into develop