Building Identity APIs: What You Need to Know