Create a Seraph Authenticator which can add a user to confluence-users (or some other nominated local group) when they log in.

This will allow LDAP users to use Confluence without being explicitly made members of a group.