A user's authentication information used to verify identity - typically one, or more, of password, token, certificate.