Using external Identity stores for OAuth2 password grant type