xdmp.userExternalSecurity(
  xdmp.user("user2@REPO.LOCAL",
    xdmp.externalSecurity("ldap08-a")
  )
)
=>
{
  "externalSecurityId": "3714400769541931396",
  "userName": "user2@REPO.LOCAL"
}