The digitally signed token that identifies a principal, lists the roles and access rights for the principal, and contains information about when the token expires.