This is something that needs to be identified and authenticated. An identity is typically a user who has login information in the form of a username and password. However, they can also be applications and services.