A unique identifier that represents a specific user, application, computer, or other entity. It enables that entity to gain access to multiple resources, such as applications and network resources, without entering their credentials multiple times. It also enables resources to validate requests from an entity.