With a user token (user/pass) for authentication, security must be working (compiled-in and set up) and the server certificate must be trusted.
Show an appropriate error message when setting up identities on a system without Security enabled and configured.