"Does that mean for external users I need to purchase a community license instead of an Identity license? Or do they need both?"

Only need a community license, although if you're only using Identity and not other community features we have special pricing for that.