Patent ID: 11936629
Assignee: VMWARE LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 13:
14. The system of claim 13, wherein the controller further comprises an identity connector, wherein:
when the second node is not a headless node, the identity connector establishes the user identity by:
preventing all outbound traffic going to each overlay network until its originating user identity is established;
displaying a captive portal to receive user credentials;
sending user credentials to an identity provider system for authentication; and
retrieving the user identity; and

when the second node is a headless node, the identity connector establishes the user identity by:
preventing all outbound traffic going to each overlay network until at least one of its originating user and originating device identity is established;
retrieving a certificate or token from said headless node computing device;
verifying the retrieved certificate or token with an identity provider compatible with the retrieved certificate or token; and
retrieving at least one of the user identity and device identity.