prepare identity service for external users, support of: - magic_link (url challenge via email) - self issued oidc (eventually social login) - open cloud mesh