IDRAC9 LDAP (FreeIPA) MFA (password + OTP) authentication fails

There is another thread for this but it's a few years old and under the PowerEdge forum, think iDRAC related goes more under this one.

Has anyone used MFA on iDRAC? I have a vanilla setup of FreeIPA. I connect iDRAC to it and it works for user/password authentication. If I enable a user to use password + OTP then that user cannot log into iDRAC. This works fine on HPE ILO and Cisco CIMC. Looking at logs it seems like it does one BIND the work, and then a 2nd identical BIND which fails. Possible bug it doesnt pass credentials right the 2nd time?

Access log on LDAP server

conn=1420 fd=233 slot=233 SSL connection from 10.10.10.60 to 10.10.10.13
conn=1420 op=-1 fd=233 Disconnect - Encountered end of file.
conn=1421 fd=233 slot=233 SSL connection from 10.10.10.60 to 10.10.10.13
conn=1421 TLS1.3 128-bit AES-GCM
conn=1421 op=0 BIND dn="uid=admin,cn=users,cn=accounts,DC=domain,DC=local" method=128 version=3
conn=1421 op=0 RESULT err=0 tag=97 nentries=0 wtime=0.009837808 optime=0.020517794 etime=0.030353984 dn="uid=admin,cn=users,cn=accounts,DC=domain,DC=local"
conn=1421 op=1 SRCH base="cn=users,cn=accounts,DC=domain,DC=local" scope=2 filter="(uid=user123)" attrs="objectClass memberOf distinguishedName uid objectcategory defaultnamingcontext namingContexts ldapservicename supportedControl supportedExtension"
conn=1421 op=1 RESULT err=0 tag=101 nentries=1 wtime=0.000105536 optime=0.000465411 etime=0.000569243
conn=1421 op=2 UNBIND
conn=1421 op=2 fd=233 Disconnect - Cleanly Closed Connection - U1
conn=1422 fd=234 slot=234 SSL connection from 10.10.10.60 to 10.10.10.13
conn=1422 TLS1.3 128-bit AES-GCM
conn=1422 op=0 BIND dn="uid=user123,cn=users,cn=accounts,DC=domain,DC=local" method=128 version=3  <--- This BIND works with user123
conn=1422 op=0 RESULT err=0 tag=97 nentries=0 wtime=0.010495809 optime=0.021563040 etime=0.032051833 dn="uid=user123,cn=users,cn=accounts,DC=domain,DC=local"
conn=1422 op=1 UNBIND
conn=1422 op=1 fd=234 Disconnect - Cleanly Closed Connection - U1
conn=1423 fd=233 slot=233 SSL connection from 10.10.10.60 to 10.10.10.13
conn=1423 TLS1.3 128-bit AES-GCM
conn=1423 op=0 BIND dn="uid=user123,cn=users,cn=accounts,DC=domain,DC=local" method=128 version=3  <--- This BIND fails with user123
conn=1423 op=0 RESULT err=49 tag=97 nentries=0 wtime=0.009417751 optime=0.000500152 etime=0.009916215
conn=1423 op=1 UNBIND
conn=1423 op=1 fd=233 Disconnect - Cleanly Closed Connection - U1

Output from iDRAC test with MFA user
Initiating Directory Services Settings Diagnostics:
trying LDAP server ldapserver.domain.local:636
Server Address ldapserver.domain.local resolved to 10.10.10.13
connect to 10.10.10.13:636 passed
Connecting to ldaps://[ldapserver.domain.local]:636...
Test user authenticated user=uid=admin,cn=users,cn=accounts,DC=domain,DC=local host=ldapserver.domain.local
Search command:
   Bind DN: uid=admin,cn=users,cn=accounts,DC=domain,DC=local
   Scope: subtree
   Base DN: cn=users,cn=accounts,DC=domain,DC=local
   Search filter: (uid=user123)
   Attribute list:
   objectClass
   memberOf
   dn
   uid
   objectCategory
   defaultNamingContext
   namingContexts
   ldapServiceName
   supportedControl
   supportedExtension
Connecting to ldaps://[ldapserver.domain.local]:636...
Test user authenticated user=uid=user123,cn=users,cn=accounts,DC=domain,DC=local <--- This BIND works with user123

host=ldapserver.domain.local
Connecting to ldaps://[ldapserver.domain.local]:636...
ERROR: bind failed: Invalid credentials, (null):  <--- This BIND fails with user123 user=uid=user123,cn=users,cn=accounts,DC=domain,DC=local host=ldapserver.domain.local

Appreciate if anyone has any ideas. Thanks