Federated Identity

As discussed in context of federated merge request (slightly off-topic) in #14116, it became clear that that federated merge (at least as envisoned by me) request will require federated identity.

This issue is for bootstrapping a more detailed discussion around this.