That’s the plan, which seems logical, but unfortunately, I have two problems: When I try to create contacts via API, I get the message that the identifier attribute is not a valid email, even though I am using a custom Identity Provider.

That indicates that you are not specifying the ipId in the payload when creating the contact. That would cause, that you are trying to create a Contact for Tapkey users, which needs to be an email address.