5.7 Peer Association Management Events

Peer association events relate to the association of a user or identity with a group, or the association of two users in some domain-specific context. For example, adding an LDAP user to a group, or associating two users for a domain-specific purpose in an application's identity association database. These events are also related to the association of identities within disparate authentication domains for purposes of federation.

For example, when an identity in Domain A makes a request to a service governed by Domain B, then a peer association is required between these domains – often this is called a trust relationship. From an implementation perspective, setting up a trust relationship is often done by establishing an identity in Domain B, which is used as a proxy for any request coming from any identity in Domain A. Trust relationships can be much more complex. However, as individual identities in Domain A can have individual associations with specific Domain B identities.