Identity token: An identity token is a security token that is digitally signed and contains claims about the identity of a user, which can be verified by a system or application. Identity tokens simplify access management by substituting for traditional credentials and are often used in federated identity and single sign-on (SSO) systems.
Categories: CC D3: Access Controls Concepts | CCSP D5: Cloud Security Operations | CISM D3: Information Security Program | CISSP D5: Identity and Access Management (IAM) | Security+ D1: General Security Concepts | SSCP D2: Access Controls
« Back to Glossary Index