An item provided and signed by the DCE security server that is both a proof of identity and a list of group memberships.