LegionIO identity profile provider: enriches identity with group memberships and profile data from LDAP/Active Directory