LdapIdentityProvider doesn't support creating external ids from the uid attribute

The LdapIdentityProvider always uses the value of an authorizable's DN to create external ids. But DNs may change over time, while the external id of an authorizable has to be stable because the property rep:externalId is protected.

Therefore we need to add the option to use the value of a configurable LDAP attribute to create external ids from it.