pull identity isauthenticated from config, directly