I believe this is not easily possible, sadly. You are not the first asking for this: Login screen: only LDAP? - #3 by Ralf_Stockmann
and there are two upstream issues: