AD group syncing with Appian group

What is the best way to take in and map AD groups to Appian groups and then add or remove Appian users from an Appian group based on if a users are in an AD group?

Basically syncing AD groups to Appian groups.

I was looking over the LDAP plugin for a few hours, but to me it looks like it just adds, activates and deactivates users based on ad groups. I may be mistaken