Describes a credential provided for authentication. Implementations should expect instances of this type to be
stored for periods of time equal to the length of the SSO session or longer, which necessitates consideration of
serialization and security. All implementations MUST be serializable and secure with respect to long-term storage.