Statement about an identity or authorization subject.

Information used to prove identity or access rights.

Secret cryptographic key used for decryption or signing.

Entity that creates and signs a security token.

Sensitive value used for authentication or encryption.

Matching public and private cryptographic keys.

Intended recipient of a security token.

Secure system for storing sensitive credentials.

Encryption using the same secret key.

Permissions requested or granted to a token.