User Identification for Policy Enforcement