RFC 3620:The TUNNEL Profile
RFC-Ref

identity


Click on the red underlined text to get to the source

... profile is to limit connections to outside servers based on the user identity negotiated via SASL. For example, a manager may connect to a proxy ...
... service restricted to managers. Since each proxy knows the identity of the next proxy being requested, it can refuse to tunnel ...



Google
Web
RFC-Ref