Add a contract for LDAP. At first glance it takes a LDAP group as input, assuming the group will be created declaratively, and gives back some configuration that sets up integration with the LDAP provider.