A token that contains the invocation credential identity, which with the client authentication token are required by the receiving server to accept the asserted identity.