* LDAP: use authn.IdentitySynchronizer to perform sync instaed of login.Service * use user id as lookup param