LDAP authentication to Framework Manager?

With the Advanced Authentication integration it appears that it is possible to use an LDAP data store for authentication into the Framework Manager without having a local account created. Is this correct? Is there any other way to achieve this same objective? All that I have read indicates that the closest that I can come to this is native mapping which allows the credential to come from LDAP, but there is still a local user defined. Am I missing something?