get_client_identity doesn't use the scope