Identity

It seems to me that there is an interesting question that runs through several of these threads which has to do with identity. For some things, we often think of the identity of the person as established by a user name and password or some biometric or other means. But, it seems to me that there are other functions which depend on physical identity. E.g., for an AppServer agent starting up, if we are going to have it determine its configuration based on some service, then how do we know which agent it is? This could also apply to security polices such as Joe is entitled to download general ledger details when he is sitting at his desk, but not when he is dialed in from a remote location. I would be interested in people's ideas about both what kind of identities are needed and how it is that they might get assigned.