Environment : This Article applies to Aruba Mobility Controllers running ArubaOS 6.4.0.x and above.
With the release of Aruba OS 6.4, Aruba Mobility Controller can be integrated with Palo Alto Networks (PAN) next-generation firewall to take advantage of the new XML APIs that were available in PAN OS 5.x.x
As far as this article goes, the "User information" can be sent to Palo Alto after dot1x Authentication is completed. The format in which it needs to be sent is “domainName\userName” or “userName@domainName”. The full-user-name will be sent to Palo Alto firewall if PAN-UserId-Integration is enabled.