Make LDAP Groups optional

refs #7343