fixed identity oauth2