topic Re: Identity Awareness in-depth explanation? in General Topics

Identity Awareness in-depth explanation?

Markus_Marquard — Tue, 16 Oct 2018 15:57:58 GMT

Hi,

I wonder is there any in-depth explanation available of Identity Awareness - especially in respect how PDP and PEP work together, how the Identity Sharing actually works?

When you use pdp/pep commands, you have some output, but is somewhere explained what it means? Eg. what about the "network to PDP mapping table" and the "network registrations table"?

To have documentation of this would make troubleshooting IA issues much easier.

Thanks

Markus

Re: Identity Awareness in-depth explanation?

Royi_Priov — Wed, 17 Oct 2018 07:10:37 GMT

Hi Markus,

I would recommend starting with Identity Awareness admin guide

R80.10 guide:

Identity Awareness R80.10 Administration Guide

Your questions are regarding Identity Sharing and I suggest reading more about it.

In few words, Identity Awareness is divided into 3 main entities:

Identity Source - responsible to acquire the identity information from an external resource.
PDP - responsible to communicate with the identity source, performs LDAP query to get the identity group membership, access roles matching and sharing with PEP.
PEP - responsible to the identity enforcement part.

The protocol which transfer identities between PDP to PEP is the "Identity Sharing".

Thanks,

Royi Priov

Team Leader, Identity Awareness R&D.

Re: Identity Awareness in-depth explanation?

Kaspars_Zibarts — Wed, 17 Oct 2018 08:17:49 GMT

Some other valuable articles I have come across over the years

ATRG: Identity Awareness

Best Practices - Identity Awareness Large Scale Deployment

Establishing SIC trust between Identity Awareness entities managed by different Security Management Servers / Domain Man…

How to troubleshoot Identity Awareness AD Query connectivity issues