I 'think' creating a new template for LDAP login alone is good.
Configuration overrides for LDAP auth type. Next up is removing all the doesn't-make-sense-for-LDAP URLs.