If users are using the $login in the Account and aren't doing on-the-fly creation then there is no reason to search ldap for the username and then bind, as it's already binded at with that user at that point.

Reason this is important is that if ldap doesn't allow the Foreman Account user to do a search then foreman ldap authentication will always fail.