default workload-identity-provider

Currently, every service account needs to be configured with the identity provider, which is specific to a cluster. In order to be cluster agnostic and also reduce the amount of configuration needed, it would be great to be able to configure a default workload identity provider globally on the controller. is that possible?