Identity Awareness Sharing in another Management

[NikFal]

Hello, 

i am facing an issue and trying to solve it. I have on my productive environment an Identity Awareness Cluster. Although, I am building a Test environment (new FWs and new Management, Different NETWORK, but they can communicate). Now I want to get the ID's from the productive environment to the Test. 
How can i make my IA Cluster as ID Source on the Test env. ?  Obviously, i can add the Productive IA Cluster as a Cluster in my Test to activate "Identity Sharing > Get Identities from other Gateway" .  But I was thinking about API, like to make AI Cluster as API and add it as a "Identity Web API" to the Test FW.

OR is there any other way to Autoscale the ID's between different environments?

[PhoneBoy · Accepted solution]

To share identities across environments, use Identity Broker.
See: https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_IdentityAwareness_AdminGuide...

[Royi_Priov · Accepted solution]

Hi @NikFal ,

In addition to PhoneBoy's suggestion, you can also consider Infinity Identity.

See more here:

https://community.checkpoint.com/t5/General-Topics/Simplifying-Zero-Trust-with-Infinity-Identity-Cen...

[the_rock]

Definitely the identity broker is your answer.

Andy