Question about Infinity Identity

[RemoteUser]

Hi Mates,

I have a few questions regarding Infinity Identity:

1. Is Infinity Identity supported on R82?

2. If I have more than one CMA and need to share identities across different CMAs, would I need a separate license for each CMA?

3. Can this deployment replace the Identity Broker setup, or are there specific scenarios where the Identity Broker would still be required?

Thanks in advance.

[PhoneBoy]

The product is now called Identity and Trust, FYI.
It is supported from R82, yes. 
From a licensing perspective, it requires either an AI Premium or AI Complete package applied to the relevant MDM(s).
See: https://support.checkpoint.com/results/sk/sk184309 

@Royi_Priov can comment further.

[Royi_Priov]

Hi @RemoteUser 

My name is Royi, and I'm the Identity and Trust owner in R&D.

1. I&T is supported on the R82 gateway, but it requires an HF. As R82.10 is the recommended version and requires no HF on the gateway, I would recommend you use it. I think having fewer custom HFs on the gateways is better. Management side, by the way, must be at least R82.10 (no HF is needed there).
2. AFAIK, yes. @Guy_Israeli can you answer?
3. Every CMA has the ability to connect to a different Infinity Portal tenant. You can connect a few CMAs to the same tenant and, by that, create a similar concept to Identity Sharing / Broker, where I&T is the PDP-as-a-service that shares identities to many gateways in different CMAs. There is no need for an Identity Broker with Identity and Trust.

If you have any additional questions, feel free to post them. I'm here to make it a success.

[RemoteUser]

Hi @Royi_Priov and @PhoneBoy  I see. Thank you so much for your reply!