AFAIK you can think of gaia like an internal Auth0, it can interpret complex evidence of a user's (or role account's in the case of non-human users) identity and normalize that into a single subject reference handle (a unique int in the case of google)