amazonka-identitystore-2.0: Amazon SSO Identity Store SDK.
Copyright(c) 2013-2023 Brendan Hay
LicenseMozilla Public License, v. 2.0.
MaintainerBrendan Hay
Stabilityauto-generated
Portabilitynon-portable (GHC extensions)
Safe HaskellSafe-Inferred
LanguageHaskell2010

Amazonka.IdentityStore.Lens

Description

 
Synopsis

Operations

CreateGroup

createGroup_description :: Lens' CreateGroup (Maybe Text) Source #

A string containing the description of the group.

createGroup_displayName :: Lens' CreateGroup (Maybe Text) Source #

A string containing the name of the group. This value is commonly displayed when the group is referenced.

createGroup_identityStoreId :: Lens' CreateGroup Text Source #

The globally unique identifier for the identity store.

createGroupResponse_groupId :: Lens' CreateGroupResponse Text Source #

The identifier of the newly created group in the identity store.

createGroupResponse_identityStoreId :: Lens' CreateGroupResponse Text Source #

The globally unique identifier for the identity store.

CreateGroupMembership

createGroupMembership_identityStoreId :: Lens' CreateGroupMembership Text Source #

The globally unique identifier for the identity store.

createGroupMembership_groupId :: Lens' CreateGroupMembership Text Source #

The identifier for a group in the identity store.

createGroupMembership_memberId :: Lens' CreateGroupMembership MemberId Source #

An object that contains the identifier of a group member. Setting the UserID field to the specific identifier for a user indicates that the user is a member of the group.

createGroupMembershipResponse_membershipId :: Lens' CreateGroupMembershipResponse Text Source #

The identifier for a newly created GroupMembership in an identity store.

createGroupMembershipResponse_identityStoreId :: Lens' CreateGroupMembershipResponse Text Source #

The globally unique identifier for the identity store.

CreateUser

createUser_addresses :: Lens' CreateUser (Maybe (NonEmpty Address)) Source #

A list of Address objects containing addresses associated with the user.

createUser_displayName :: Lens' CreateUser (Maybe Text) Source #

A string containing the user's name. This value is typically formatted for display when the user is referenced. For example, "John Doe."

createUser_emails :: Lens' CreateUser (Maybe (NonEmpty Email)) Source #

A list of Email objects containing email addresses associated with the user.

createUser_locale :: Lens' CreateUser (Maybe Text) Source #

A string containing the user's geographical region or location.

createUser_name :: Lens' CreateUser (Maybe Name) Source #

An object containing the user's name.

createUser_nickName :: Lens' CreateUser (Maybe Text) Source #

A string containing an alternate name for the user.

createUser_phoneNumbers :: Lens' CreateUser (Maybe (NonEmpty PhoneNumber)) Source #

A list of PhoneNumber objects containing phone numbers associated with the user.

createUser_preferredLanguage :: Lens' CreateUser (Maybe Text) Source #

A string containing the preferred language of the user. For example, "American English" or "en-us."

createUser_profileUrl :: Lens' CreateUser (Maybe Text) Source #

A string containing a URL that may be associated with the user.

createUser_timezone :: Lens' CreateUser (Maybe Text) Source #

A string containing the user's time zone.

createUser_title :: Lens' CreateUser (Maybe Text) Source #

A string containing the user's title. Possible values are left unspecified given that they depend on each customer's specific needs.

createUser_userName :: Lens' CreateUser (Maybe Text) Source #

A unique string used to identify the user. The length limit is 128 characters. This value can consist of letters, accented characters, symbols, numbers, and punctuation. This value is specified at the time the user is created and stored as an attribute of the user object in the identity store.

createUser_userType :: Lens' CreateUser (Maybe Text) Source #

A string indicating the user's type. Possible values depend on each customer's specific needs, so they are left unspecified.

createUser_identityStoreId :: Lens' CreateUser Text Source #

The globally unique identifier for the identity store.

createUserResponse_userId :: Lens' CreateUserResponse Text Source #

The identifier of the newly created user in the identity store.

createUserResponse_identityStoreId :: Lens' CreateUserResponse Text Source #

The globally unique identifier for the identity store.

DeleteGroup

deleteGroup_identityStoreId :: Lens' DeleteGroup Text Source #

The globally unique identifier for the identity store.

deleteGroup_groupId :: Lens' DeleteGroup Text Source #

The identifier for a group in the identity store.

DeleteGroupMembership

deleteGroupMembership_identityStoreId :: Lens' DeleteGroupMembership Text Source #

The globally unique identifier for the identity store.

deleteGroupMembership_membershipId :: Lens' DeleteGroupMembership Text Source #

The identifier for a GroupMembership in an identity store.

DeleteUser

deleteUser_identityStoreId :: Lens' DeleteUser Text Source #

The globally unique identifier for the identity store.

deleteUser_userId :: Lens' DeleteUser Text Source #

The identifier for a user in the identity store.

DescribeGroup

describeGroup_identityStoreId :: Lens' DescribeGroup Text Source #

The globally unique identifier for the identity store, such as d-1234567890. In this example, d- is a fixed prefix, and 1234567890 is a randomly generated string that contains numbers and lower case letters. This value is generated at the time that a new identity store is created.

describeGroup_groupId :: Lens' DescribeGroup Text Source #

The identifier for a group in the identity store.

describeGroupResponse_description :: Lens' DescribeGroupResponse (Maybe Text) Source #

A string containing a description of the group.

describeGroupResponse_displayName :: Lens' DescribeGroupResponse (Maybe Text) Source #

The group’s display name value. The length limit is 1,024 characters. This value can consist of letters, accented characters, symbols, numbers, punctuation, tab, new line, carriage return, space, and nonbreaking space in this attribute. This value is specified at the time that the group is created and stored as an attribute of the group object in the identity store.

describeGroupResponse_externalIds :: Lens' DescribeGroupResponse (Maybe (NonEmpty ExternalId)) Source #

A list of ExternalId objects that contains the identifiers issued to this resource by an external identity provider.

describeGroupResponse_groupId :: Lens' DescribeGroupResponse Text Source #

The identifier for a group in the identity store.

describeGroupResponse_identityStoreId :: Lens' DescribeGroupResponse Text Source #

The globally unique identifier for the identity store.

DescribeGroupMembership

describeGroupMembership_identityStoreId :: Lens' DescribeGroupMembership Text Source #

The globally unique identifier for the identity store.

describeGroupMembership_membershipId :: Lens' DescribeGroupMembership Text Source #

The identifier for a GroupMembership in an identity store.

describeGroupMembershipResponse_membershipId :: Lens' DescribeGroupMembershipResponse Text Source #

The identifier for a GroupMembership in an identity store.

DescribeUser

describeUser_identityStoreId :: Lens' DescribeUser Text Source #

The globally unique identifier for the identity store, such as d-1234567890. In this example, d- is a fixed prefix, and 1234567890 is a randomly generated string that contains numbers and lower case letters. This value is generated at the time that a new identity store is created.

describeUser_userId :: Lens' DescribeUser Text Source #

The identifier for a user in the identity store.

describeUserResponse_externalIds :: Lens' DescribeUserResponse (Maybe (NonEmpty ExternalId)) Source #

A list of ExternalId objects that contains the identifiers issued to this resource by an external identity provider.

describeUserResponse_locale :: Lens' DescribeUserResponse (Maybe Text) Source #

A string containing the user's geographical region or location.

describeUserResponse_nickName :: Lens' DescribeUserResponse (Maybe Text) Source #

An alternative descriptive name for the user.

describeUserResponse_phoneNumbers :: Lens' DescribeUserResponse (Maybe (NonEmpty PhoneNumber)) Source #

A list of PhoneNumber objects associated with a user.

describeUserResponse_title :: Lens' DescribeUserResponse (Maybe Text) Source #

A string containing the user's title.

describeUserResponse_userName :: Lens' DescribeUserResponse (Maybe Text) Source #

A unique string used to identify the user. The length limit is 128 characters. This value can consist of letters, accented characters, symbols, numbers, and punctuation. This value is specified at the time the user is created and stored as an attribute of the user object in the identity store.

describeUserResponse_userType :: Lens' DescribeUserResponse (Maybe Text) Source #

A string indicating the user's type.

describeUserResponse_userId :: Lens' DescribeUserResponse Text Source #

The identifier for a user in the identity store.

describeUserResponse_identityStoreId :: Lens' DescribeUserResponse Text Source #

The globally unique identifier for the identity store.

GetGroupId

getGroupId_identityStoreId :: Lens' GetGroupId Text Source #

The globally unique identifier for the identity store.

getGroupId_alternateIdentifier :: Lens' GetGroupId AlternateIdentifier Source #

A unique identifier for a user or group that is not the primary identifier. This value can be an identifier from an external identity provider (IdP) that is associated with the user, the group, or a unique attribute. For example, a unique GroupDisplayName.

getGroupIdResponse_groupId :: Lens' GetGroupIdResponse Text Source #

The identifier for a group in the identity store.

getGroupIdResponse_identityStoreId :: Lens' GetGroupIdResponse Text Source #

The globally unique identifier for the identity store.

GetGroupMembershipId

getGroupMembershipId_identityStoreId :: Lens' GetGroupMembershipId Text Source #

The globally unique identifier for the identity store.

getGroupMembershipId_groupId :: Lens' GetGroupMembershipId Text Source #

The identifier for a group in the identity store.

getGroupMembershipId_memberId :: Lens' GetGroupMembershipId MemberId Source #

An object that contains the identifier of a group member. Setting the UserID field to the specific identifier for a user indicates that the user is a member of the group.

getGroupMembershipIdResponse_membershipId :: Lens' GetGroupMembershipIdResponse Text Source #

The identifier for a GroupMembership in an identity store.

getGroupMembershipIdResponse_identityStoreId :: Lens' GetGroupMembershipIdResponse Text Source #

The globally unique identifier for the identity store.

GetUserId

getUserId_identityStoreId :: Lens' GetUserId Text Source #

The globally unique identifier for the identity store.

getUserId_alternateIdentifier :: Lens' GetUserId AlternateIdentifier Source #

A unique identifier for a user or group that is not the primary identifier. This value can be an identifier from an external identity provider (IdP) that is associated with the user, the group, or a unique attribute. For example, a unique UserDisplayName.

getUserIdResponse_httpStatus :: Lens' GetUserIdResponse Int Source #

The response's http status code.

getUserIdResponse_userId :: Lens' GetUserIdResponse Text Source #

The identifier for a user in the identity store.

getUserIdResponse_identityStoreId :: Lens' GetUserIdResponse Text Source #

The globally unique identifier for the identity store.

IsMemberInGroups

isMemberInGroups_identityStoreId :: Lens' IsMemberInGroups Text Source #

The globally unique identifier for the identity store.

isMemberInGroups_memberId :: Lens' IsMemberInGroups MemberId Source #

An object containing the identifier of a group member.

isMemberInGroups_groupIds :: Lens' IsMemberInGroups (NonEmpty Text) Source #

A list of identifiers for groups in the identity store.

isMemberInGroupsResponse_results :: Lens' IsMemberInGroupsResponse [GroupMembershipExistenceResult] Source #

A list containing the results of membership existence checks.

ListGroupMemberships

listGroupMemberships_maxResults :: Lens' ListGroupMemberships (Maybe Natural) Source #

The maximum number of results to be returned per request. This parameter is used in all List requests to specify how many results to return in one page.

listGroupMemberships_nextToken :: Lens' ListGroupMemberships (Maybe Text) Source #

The pagination token used for the ListUsers, ListGroups and ListGroupMemberships API operations. This value is generated by the identity store service. It is returned in the API response if the total results are more than the size of one page. This token is also returned when it is used in the API request to search for the next page.

listGroupMemberships_identityStoreId :: Lens' ListGroupMemberships Text Source #

The globally unique identifier for the identity store.

listGroupMemberships_groupId :: Lens' ListGroupMemberships Text Source #

The identifier for a group in the identity store.

listGroupMembershipsResponse_nextToken :: Lens' ListGroupMembershipsResponse (Maybe Text) Source #

The pagination token used for the ListUsers, ListGroups, and ListGroupMemberships API operations. This value is generated by the identity store service. It is returned in the API response if the total results are more than the size of one page. This token is also returned when it is used in the API request to search for the next page.

ListGroupMembershipsForMember

listGroupMembershipsForMember_maxResults :: Lens' ListGroupMembershipsForMember (Maybe Natural) Source #

The maximum number of results to be returned per request. This parameter is used in the ListUsers and ListGroups requests to specify how many results to return in one page. The length limit is 50 characters.

listGroupMembershipsForMember_nextToken :: Lens' ListGroupMembershipsForMember (Maybe Text) Source #

The pagination token used for the ListUsers, ListGroups, and ListGroupMemberships API operations. This value is generated by the identity store service. It is returned in the API response if the total results are more than the size of one page. This token is also returned when it is used in the API request to search for the next page.

listGroupMembershipsForMember_identityStoreId :: Lens' ListGroupMembershipsForMember Text Source #

The globally unique identifier for the identity store.

listGroupMembershipsForMember_memberId :: Lens' ListGroupMembershipsForMember MemberId Source #

An object that contains the identifier of a group member. Setting the UserID field to the specific identifier for a user indicates that the user is a member of the group.

listGroupMembershipsForMemberResponse_nextToken :: Lens' ListGroupMembershipsForMemberResponse (Maybe Text) Source #

The pagination token used for the ListUsers, ListGroups, and ListGroupMemberships API operations. This value is generated by the identity store service. It is returned in the API response if the total results are more than the size of one page. This token is also returned when it is used in the API request to search for the next page.

listGroupMembershipsForMemberResponse_groupMemberships :: Lens' ListGroupMembershipsForMemberResponse [GroupMembership] Source #

A list of GroupMembership objects in the group for a specified member.

ListGroups

listGroups_filters :: Lens' ListGroups (Maybe [Filter]) Source #

A list of Filter objects, which is used in the ListUsers and ListGroups requests.

listGroups_maxResults :: Lens' ListGroups (Maybe Natural) Source #

The maximum number of results to be returned per request. This parameter is used in the ListUsers and ListGroups requests to specify how many results to return in one page. The length limit is 50 characters.

listGroups_nextToken :: Lens' ListGroups (Maybe Text) Source #

The pagination token used for the ListUsers and ListGroups API operations. This value is generated by the identity store service. It is returned in the API response if the total results are more than the size of one page. This token is also returned when it is used in the API request to search for the next page.

listGroups_identityStoreId :: Lens' ListGroups Text Source #

The globally unique identifier for the identity store, such as d-1234567890. In this example, d- is a fixed prefix, and 1234567890 is a randomly generated string that contains numbers and lower case letters. This value is generated at the time that a new identity store is created.

listGroupsResponse_nextToken :: Lens' ListGroupsResponse (Maybe Text) Source #

The pagination token used for the ListUsers and ListGroups API operations. This value is generated by the identity store service. It is returned in the API response if the total results are more than the size of one page. This token is also returned when it1 is used in the API request to search for the next page.

listGroupsResponse_groups :: Lens' ListGroupsResponse [Group] Source #

A list of Group objects in the identity store.

ListUsers

listUsers_filters :: Lens' ListUsers (Maybe [Filter]) Source #

A list of Filter objects, which is used in the ListUsers and ListGroups requests.

listUsers_maxResults :: Lens' ListUsers (Maybe Natural) Source #

The maximum number of results to be returned per request. This parameter is used in the ListUsers and ListGroups requests to specify how many results to return in one page. The length limit is 50 characters.

listUsers_nextToken :: Lens' ListUsers (Maybe Text) Source #

The pagination token used for the ListUsers and ListGroups API operations. This value is generated by the identity store service. It is returned in the API response if the total results are more than the size of one page. This token is also returned when it is used in the API request to search for the next page.

listUsers_identityStoreId :: Lens' ListUsers Text Source #

The globally unique identifier for the identity store, such as d-1234567890. In this example, d- is a fixed prefix, and 1234567890 is a randomly generated string that contains numbers and lower case letters. This value is generated at the time that a new identity store is created.

listUsersResponse_nextToken :: Lens' ListUsersResponse (Maybe Text) Source #

The pagination token used for the ListUsers and ListGroups API operations. This value is generated by the identity store service. It is returned in the API response if the total results are more than the size of one page. This token is also returned when it is used in the API request to search for the next page.

listUsersResponse_httpStatus :: Lens' ListUsersResponse Int Source #

The response's http status code.

listUsersResponse_users :: Lens' ListUsersResponse [User] Source #

A list of User objects in the identity store.

UpdateGroup

updateGroup_identityStoreId :: Lens' UpdateGroup Text Source #

The globally unique identifier for the identity store.

updateGroup_groupId :: Lens' UpdateGroup Text Source #

The identifier for a group in the identity store.

updateGroup_operations :: Lens' UpdateGroup (NonEmpty AttributeOperation) Source #

A list of AttributeOperation objects to apply to the requested group. These operations might add, replace, or remove an attribute.

UpdateUser

updateUser_identityStoreId :: Lens' UpdateUser Text Source #

The globally unique identifier for the identity store.

updateUser_userId :: Lens' UpdateUser Text Source #

The identifier for a user in the identity store.

updateUser_operations :: Lens' UpdateUser (NonEmpty AttributeOperation) Source #

A list of AttributeOperation objects to apply to the requested user. These operations might add, replace, or remove an attribute.

Types

Address

address_country :: Lens' Address (Maybe Text) Source #

The country of the address.

address_formatted :: Lens' Address (Maybe Text) Source #

A string containing a formatted version of the address for display.

address_locality :: Lens' Address (Maybe Text) Source #

A string of the address locality.

address_postalCode :: Lens' Address (Maybe Text) Source #

The postal code of the address.

address_primary :: Lens' Address (Maybe Bool) Source #

A Boolean value representing whether this is the primary address for the associated resource.

address_region :: Lens' Address (Maybe Text) Source #

The region of the address.

address_streetAddress :: Lens' Address (Maybe Text) Source #

The street of the address.

address_type :: Lens' Address (Maybe Text) Source #

A string representing the type of address. For example, "Home."

AlternateIdentifier

alternateIdentifier_externalId :: Lens' AlternateIdentifier (Maybe ExternalId) Source #

The identifier issued to this resource by an external identity provider.

alternateIdentifier_uniqueAttribute :: Lens' AlternateIdentifier (Maybe UniqueAttribute) Source #

An entity attribute that's unique to a specific entity.

AttributeOperation

attributeOperation_attributeValue :: Lens' AttributeOperation (Maybe AttributeValue) Source #

The value of the attribute. This is a Document type. This type is not supported by Java V1, Go V1, and older versions of the AWS CLI.

attributeOperation_attributePath :: Lens' AttributeOperation Text Source #

A string representation of the path to a given attribute or sub-attribute. Supports JMESPath.

AttributeValue

Email

email_primary :: Lens' Email (Maybe Bool) Source #

A Boolean value representing whether this is the primary email address for the associated resource.

email_type :: Lens' Email (Maybe Text) Source #

A string representing the type of address. For example, "Work."

email_value :: Lens' Email (Maybe Text) Source #

A string containing an email address. For example, "johndoe@amazon.com."

ExternalId

externalId_issuer :: Lens' ExternalId Text Source #

The issuer for an external identifier.

externalId_id :: Lens' ExternalId Text Source #

The identifier issued to this resource by an external identity provider.

Filter

filter_attributePath :: Lens' Filter Text Source #

The attribute path that is used to specify which attribute name to search. Length limit is 255 characters. For example, UserName is a valid attribute path for the ListUsers API, and DisplayName is a valid attribute path for the ListGroups API.

filter_attributeValue :: Lens' Filter Text Source #

Represents the data for an attribute. Each attribute value is described as a name-value pair.

Group

group_description :: Lens' Group (Maybe Text) Source #

A string containing a description of the specified group.

group_displayName :: Lens' Group (Maybe Text) Source #

The group’s display name value. The length limit is 1,024 characters. This value can consist of letters, accented characters, symbols, numbers, punctuation, tab, new line, carriage return, space, and nonbreaking space in this attribute. This value is specified at the time the group is created and stored as an attribute of the group object in the identity store.

group_externalIds :: Lens' Group (Maybe (NonEmpty ExternalId)) Source #

A list of ExternalId objects that contains the identifiers issued to this resource by an external identity provider.

group_groupId :: Lens' Group Text Source #

The identifier for a group in the identity store.

group_identityStoreId :: Lens' Group Text Source #

The globally unique identifier for the identity store.

GroupMembership

groupMembership_groupId :: Lens' GroupMembership (Maybe Text) Source #

The identifier for a group in the identity store.

groupMembership_memberId :: Lens' GroupMembership (Maybe MemberId) Source #

An object that contains the identifier of a group member. Setting the UserID field to the specific identifier for a user indicates that the user is a member of the group.

groupMembership_membershipId :: Lens' GroupMembership (Maybe Text) Source #

The identifier for a GroupMembership object in an identity store.

groupMembership_identityStoreId :: Lens' GroupMembership Text Source #

The globally unique identifier for the identity store.

GroupMembershipExistenceResult

groupMembershipExistenceResult_groupId :: Lens' GroupMembershipExistenceResult (Maybe Text) Source #

The identifier for a group in the identity store.

groupMembershipExistenceResult_memberId :: Lens' GroupMembershipExistenceResult (Maybe MemberId) Source #

An object that contains the identifier of a group member. Setting the UserID field to the specific identifier for a user indicates that the user is a member of the group.

MemberId

memberId_userId :: Lens' MemberId (Maybe Text) Source #

An object containing the identifiers of resources that can be members.

Name

name_familyName :: Lens' Name (Maybe Text) Source #

The family name of the user.

name_formatted :: Lens' Name (Maybe Text) Source #

A string containing a formatted version of the name for display.

name_givenName :: Lens' Name (Maybe Text) Source #

The given name of the user.

name_honorificPrefix :: Lens' Name (Maybe Text) Source #

The honorific prefix of the user. For example, "Dr."

name_honorificSuffix :: Lens' Name (Maybe Text) Source #

The honorific suffix of the user. For example, "M.D."

name_middleName :: Lens' Name (Maybe Text) Source #

The middle name of the user.

PhoneNumber

phoneNumber_primary :: Lens' PhoneNumber (Maybe Bool) Source #

A Boolean value representing whether this is the primary phone number for the associated resource.

phoneNumber_type :: Lens' PhoneNumber (Maybe Text) Source #

A string representing the type of a phone number. For example, "Mobile."

phoneNumber_value :: Lens' PhoneNumber (Maybe Text) Source #

A string containing a phone number. For example, "8675309" or "+1 (800) 123-4567".

UniqueAttribute

uniqueAttribute_attributePath :: Lens' UniqueAttribute Text Source #

A string representation of the path to a given attribute or sub-attribute. Supports JMESPath.

uniqueAttribute_attributeValue :: Lens' UniqueAttribute AttributeValue Source #

The value of the attribute. This is a Document type. This type is not supported by Java V1, Go V1, and older versions of the AWS CLI.

User

user_addresses :: Lens' User (Maybe (NonEmpty Address)) Source #

A list of Address objects containing addresses associated with the user.

user_displayName :: Lens' User (Maybe Text) Source #

A string containing the user's name that's formatted for display when the user is referenced. For example, "John Doe."

user_emails :: Lens' User (Maybe (NonEmpty Email)) Source #

A list of Email objects containing email addresses associated with the user.

user_externalIds :: Lens' User (Maybe (NonEmpty ExternalId)) Source #

A list of ExternalId objects that contains the identifiers issued to this resource by an external identity provider.

user_locale :: Lens' User (Maybe Text) Source #

A string containing the user's geographical region or location.

user_name :: Lens' User (Maybe Name) Source #

An object containing the user's name.

user_nickName :: Lens' User (Maybe Text) Source #

A string containing an alternate name for the user.

user_phoneNumbers :: Lens' User (Maybe (NonEmpty PhoneNumber)) Source #

A list of PhoneNumber objects containing phone numbers associated with the user.

user_preferredLanguage :: Lens' User (Maybe Text) Source #

A string containing the preferred language of the user. For example, "American English" or "en-us."

user_profileUrl :: Lens' User (Maybe Text) Source #

A string containing a URL that may be associated with the user.

user_timezone :: Lens' User (Maybe Text) Source #

A string containing the user's time zone.

user_title :: Lens' User (Maybe Text) Source #

A string containing the user's title. Possible values depend on each customer's specific needs, so they are left unspecified.

user_userName :: Lens' User (Maybe Text) Source #

A unique string used to identify the user. The length limit is 128 characters. This value can consist of letters, accented characters, symbols, numbers, and punctuation. This value is specified at the time the user is created and stored as an attribute of the user object in the identity store.

user_userType :: Lens' User (Maybe Text) Source #

A string indicating the user's type. Possible values depend on each customer's specific needs, so they are left unspecified.

user_userId :: Lens' User Text Source #

The identifier for a user in the identity store.

user_identityStoreId :: Lens' User Text Source #

The globally unique identifier for the identity store.