Surely, the idea is to create an account per user, not per client. In that case, each user should be able to login on multiple clients using OIDC or app passwords, as appropriate to the client. If not, then OIDC is not a lot of use and a retrograde move from LDAP.