Support caching for mapped principals/identites

Within a login process like WS-Federation, several requests must be processed by the STS which can involve identity mapping.
Identity mapping information are usually provided by remote systems like LDAP, Web Services, etc. The performance can be improved if the mapped principals/identites are cached.

Ehcache should be used and maybe another option is hazelcast in a clustered environment.