CMS-4272 Implement domain objects for identity