documented JPA identity store configuration