Hi Markus,
I would recommend starting with Identity Awareness admin guide
R80.10 guide:
Identity Awareness R80.10 Administration Guide
Your questions are regarding Identity Sharing and I suggest reading more about it.
In few words, Identity Awareness is divided into 3 main entities:
- Identity Source - responsible to acquire the identity information from an external resource.
- PDP - responsible to communicate with the identity source, performs LDAP query to get the identity group membership, access roles matching and sharing with PEP.
- PEP - responsible to the identity enforcement part.
The protocol which transfer identities between PDP to PEP is the "Identity Sharing".
Thanks,
Royi Priov
Team Leader, Identity Awareness R&D.
Thanks,
Royi Priov
Group manager, Identity Awareness R&D