I think authtype could be set to an OPENAM flag like LDAP users (see https://github.com/geonetwork/core-geonetwork/blob/2.10.x/web/src/main/java/org/fao/geonet/kernel/security/ldap/LDAPUtils.java#L76) - even if it's not the case in develop branch anymore (?)