Filter out LDAP users which are missing the identifier attribute

In case the identifier attribtue was missing we were defaulting to an empty string,
which (1) isn't really correct and (2) is not a valid identifier for api-platform
and makes it fail when serializig API responses.

Avoid this by ignoring all LDAP users without an identifier.