Data which unambiguously distinguishes an entity in the authentication process. This requires that such an identifier be unambiguous at least within a security domain.