identity manager: support add identities in headless mode