Context:
In order to allow for on demand validation of manually typed identity id's, no yet present in the identity cache, we need an endpoint that tries to resolve such an id to either a user or group. If not present in the current state of the identityCache it should try to resolve it directly from the connected engine apis.

AT:

• new endpoint to get an identity (with metadata) by id is created
• the new endpoint is documented