User Identification and Cloud Identity Engine
In this chapter, we will learn about user identification and leveraging Cloud Identity Engine to interface with on-premises or cloud active directory to retrieve group information. User identification is one of the major pillars of zero trust as it allows you to grant or deny access to resources based not just on a user’s source IP address but on the identity. Cloud Identity Engine allows you to aggregate different sources of group membership.
We’re going to cover the following main topics so you can build a solid security policy to control who has access to what:
- User identification and group mapping
- Cloud Identity Engine
- User ID redistribution
