use provider openid_connect for new synced ldap users