A student's open lab: learning and sharing, free for everyone.

SIP UniverseFree University

Home / Oracle, Ribbon, and AudioCodes / Identity at a trust boundary

Identity at a trust boundary

P-Asserted-Identity is a network-asserted identity. An SBC at a trust boundary decides whether that assertion continues.

Learn in 5 minutes

  1. Read P-Asserted-Identity and Privacy
  2. Strip an assertion that arrives from an untrusted peer
  3. Use the interop guide for header mapping

Visual

PAI arrives from the carrier · study drawing · cyphermonkeylabs.com CarrierSBCCUCM INVITE 100 INVITE 100

SVG HTML PNG

Add an assertion only for a peer you are willing to tell the identity to.

Worked example

Find the assertion Dissect the carrier INVITE. Which header asserts the identity?

    Vendor menus, ports, and license names change. Confirm before relying on a sentence that is not an RFC.

    Fault

    CUCM receives P-Asserted-Identity copied from the carrier INVITE. The carrier is not inside the trust boundary.

    The outbound INVITE still contains the carrier’s P-Asserted-Identity.

    Quiz

    P-Asserted-Identity is defined by


    Privacy: id asks the network to


    PAI from an untrusted carrier should be


    Adding PAI toward a peer is appropriate when


    Diversion and History-Info


    A Ribbon peer’s header requirements are in


    Ecosystem

    Glossary, sister systems, and the integration seam for this room.

    AI omni-channel agents A voice bot still needs a session. SIP creates, modifies, and ends sessions. Omni-channel, in the contact-center sense, means the same contact can also live on chat or another digital channel. Those channels do not replace the voice session. On Amazon Connect the platform owns the managed PSTN voice channel. Bridging an outside carrier into Connect with a Chime Voice Connector is not a supported pattern unless AWS reviews it. When an SBC forks the voice leg to a recorder, that fork is SIPREC, a different plane from the customer dialog.

    AI agents A voice bot still needs a session. On Amazon Connect the platform owns the managed PSTN voice channel. Bridging an outside carrier into Connect with a Chime Voice Connector is not a supported pattern unless AWS reviews it. The FreeSWITCH manual page also describes SignalWire, founded by the FreeSWITCH team, as a hosted platform with AI agents behind REST APIs and SWML.

    Glossary · Ecosystem map · Ports · Troubleshooting

    Sources and go deeper