Siebel 8.1.1.4 - BIP 10.1.3.4.1 - Authentication

BIP Folks,

Who could explain to me the following:

1) The Siebel 8 Reports Bookshelf for the Connected architecture explains the general data flow but misses the entry of the EAI componnet and its role in responding back to getRoles and other authentication calls from BI Publisher. Please provide the flow around that.

2) xdo and xliff files: How are they generated ; what do they contain; how are they useful ? When would the need come to generate them again ? during everytime we change something on the rtf ?

3) What is the architecture behind the coding in the rtf template. I see some notes in google on XDO architecture, calling xsl librarires etc. Would require some information here.