The out-of-box driver supports User objects in SalesForce, but I'd like to sync Contact and/or Person records. My external customers request access to webapps that I protect with NAM. I want to manage their identity/credential with IDM, and use entitlements I grant through a request interface to control which webapps NAM allows them to use. I need also need to manage the lifecycle of contact and person records as they transistion between the two, as well as password management for these external accounts.