security impl for external identity service