Identity translation gateway

[simardst]

Can you provide more details and/or samples on how to implement the identity translation gateway scenario?
How can a module publish events on behalf of a leaf device?
How can a module subscribe to leaf device twins updates?

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 22ebfe95-4ec9-e071-bc89-67ea25905d37
• Version Independent ID: 819f9aff-e1eb-6e05-fcd2-4daa4e7165eb
• Content: Use Azure IoT Edge devices as gateways
• Content Source: articles/iot-edge/iot-edge-as-gateway.md
• Service: iot-edge
• GitHub Login: @kgremban
• Microsoft Alias: kgremban

[Alberto-Vega]

@simardst Thanks for the feedback! We are currently investigating and will update you shortly.

[Alberto-Vega]

@simardst Thanks again for your valuable feedback! I have assigned the issue to the content author to evaluate and update as appropriate.

[jokarl]

I am also interested in how automatic device provisioning would work in this scenario when leaf devices only use symmetric keys to the gateway. How do I set it up in the leaf device, the edge and the DPS respectively?

[kgremban]

@simardst and @hochas The product team has this on their to-do list. There's already an request for it in the IoT Edge feedback forum: https://feedback.azure.com/forums/907045-azure-iot-edge/suggestions/32497981-code-sample-for-identity-translation-pattern. You can help to prioritize this content by adding your votes.

[markexperience]

This is essential functionality, as there are a multitude of scenarios where downstream child devices should be remain isolated from the hub. Identity translation is an essential component in such cases.

[xiongyu0523]

I agree this is an essential feature for Gateway. When downstream devices like Zigbee or BLE mesh being provisioned, they use their own security and authentication method, once these devices joined the subnetwork, the provisioner (usually the gateway) should be responsible to register and manage identities for them, I would like to see how this can be implemented.

[asergaz]

We will now proceed to close this thread. If there are further questions regarding this matter, please tag me in your reply. We will gladly continue the discussion and we will reopen the issue.

[MarekLani]

Please, why was this thread closed? I think answer to the original request was not provided yet.

[kgremban]

@MarekLani These issues are only for the documentation, not for product features. Since an identity translation gateway hasn't been implemented in the product yet, there's no answer that we can provide here. You can follow the link provided earlier to add your vote to the feature request on the feedback forum.

[smoms]

Sorry to open it again but i want to be sure i understand since i have same issue. @MarekLani no identity translation has been implemented yet in the gateway? How can leaf device receive twin updates? thanks

[MarekLani]

@smoms I am not from product team. Nevertheless, functionality of identity translation is already supported, however we are missing sample code of IoT Edge module, which handles communication with IoT Hub and identity translation piece - something we would be able to reuse. In case of identity translation scenario, only IoT Edge module is capable to receive twin updates. It is then up to this module to forward those updates to your leaf devices.

[smoms]

@MarekLani many thanks. I was expecting that about twin updates. But what is the module where i need to do my own changes to forward twin updates to the leaf devices? thanks