Before calling this API, use CreateDomain or UpdateDomain to enable identity resolution: set Matching to true
Useful links