Creates a new IMSUser based on the provided input Does not check the authorization status This MUST NOT be exposed via the public API
the created IMSUser
defines the IMSUser